{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:17f52bd2-741e-5275-9036-99b68b8a3b0d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10", "version": "18.2.14-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:09d75673-73cb-50d3-a7c7-ae19606a18b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:0ebd96df-f875-54cf-b173-ecc01cb571aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:1bd9ea42-d096-5600-8fba-03ef5734a80a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:863dca30-c74f-5643-a4b0-41fea7a6aa37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:201863be-da37-5453-8f5c-f7f47f554426", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:6e19a91e-b6f2-5f56-a57b-45711f15151a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:c5eb8129-df74-59ad-8347-28e29f903813", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:44ad1e9c-a4a5-5c16-b2e1-15b200aaa47e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:2e26d00a-3d1e-53a6-bbec-6ac400cca0d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:aea695bf-57b7-5824-bcba-a6fab8c9a353", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:b30910e6-5f26-5bcf-b130-f8fede558577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:a96b71cc-f6c8-56d5-b233-bb2cf4b0848d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:5ccf1108-012a-5cad-a374-24efbf815435", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:655d2189-0415-5db0-9c60-b6472136bd46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:d557ac75-4e6a-5e98-93c5-b73f45f27462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:0db78157-143b-5d7b-9129-27727b37bd60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:893a41e2-3d6e-5606-a5a2-8657c46353b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:6bd2828e-1130-5c5f-aa4d-a2f3dc306f1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:687037e1-efef-5f02-8f0e-1134257716d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:1c3ed462-a824-56e3-8405-089fbd35f0e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:49d6e4b8-f289-5605-aba6-4f0cad10998d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:ac6f9d8a-aff1-5f86-a416-ca23619b94f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:790be8be-bfb0-5f70-9946-bf2c7ce25fc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.10 of @angular/animations, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:bd76e603-d078-5db3-87d1-9ee6b45c9f7a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.10 of @angular/animations. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:fc11adef-01c2-58c2-8ae0-84339b36645c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:76e45ceb-8aa8-5802-b516-4b0d9f5b0a91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.10 of @angular/animations." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:bd8b3b62-7dd2-58d3-b25c-9f19745d6377", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.10 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@18.2.14-tuxcare.10" } ] }