{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8d136a21-6721-5e6e-b404-61688ce2e81d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1", "version": "18.2.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:2e438874-b5c8-555f-b385-76d6ef32c73a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.1 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:dadd5ac9-32cb-5f2d-b1b8-41fc853c3bd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.3." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:22fe757f-08c6-51f6-8d26-66739acdb9fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.4." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c6b298e1-7f1f-56a3-8732-b74bf983786c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c0c61d40-2068-5271-975a-eb3c41f89614", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.5." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ee471b7d-871d-521d-af36-c6f4270befda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:deeba064-b782-5c5a-affd-3b67f0da748f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:87e907dc-ae4f-5aab-a017-f23566f15544", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:fc5d784a-51f4-5f52-9fc9-6ee1443f7083", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b2af1155-ccd8-58a1-9bdf-61d01714b85d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:37e88555-6d02-5dcd-929a-b3955b4761ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:abf60619-0304-5e3f-adc9-6ec05825eebc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:00269d8f-b2be-53e7-8fed-63347cbe3a86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:820c08f9-9a1d-5847-95aa-eececc2311a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9405eee7-227b-5379-bdf0-de6193a16536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:bd964b0e-8e41-579b-91e4-cb1b4912221c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:daae755f-3caf-53e7-84b4-dfaf6a4048e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9bf9bff3-c679-5338-868a-1d956cae9f8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6e68f90c-cd16-54fa-add3-433ddccf433b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5e8268a0-2081-5b51-885b-62166b4d143a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:2a4bd4a8-919a-51e8-908f-0b26875d2687", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:05705aed-fc81-5264-a4a0-efa3aab68aac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ae95e44d-96ed-5274-843d-e6617e11f79f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.1 of @angular/animations, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:962145e2-ec4d-53f7-a393-37b97d123779", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.1 of @angular/animations. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:798bbf3e-972e-5952-9a58-b47f9d34d1f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.1 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f8701fc6-482a-5bc2-908b-839aa77d405d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.1 of @angular/animations." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:46d98fb2-1ff0-5ef0-b58a-1d824d9e87c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.1 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.1" } ] }