{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3e1a2718-8f0a-5392-bef1-d405132c0e27", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/animations", "purl": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9", "version": "5.2.11-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-4231", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:54495de8-e922-5d22-922f-519d4774d9a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:6194a0d2-083c-5f13-b9bf-a9676f292b3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:def00a59-bc5b-5b60-bc39-5ad03f77e21f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:3ac15055-dfc2-54f5-b587-e41f226e375a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:f1881435-c115-5734-a9aa-5289f3828159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:f902cf2d-fb27-5d4f-93e8-d7167a8514a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:bd9e0ffb-c782-55f6-9231-43b0548b8f48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:bd75e600-c141-5f90-9f9e-134dc1aebc89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:60d4d009-42f7-58b5-8529-2753d51fe6e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:43267b37-7729-576d-8e88-23e732cbbbf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:741add8b-8ffd-5476-b585-5784e41d635b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:6841c17b-cee1-5f1f-ab22-44ca4554ef5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:cfd4ef4a-6669-5dd3-ae82-5bcafc2fb036", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:7886e8e8-90b5-5943-a22b-5f281857bf46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:a2854650-9719-5837-9d54-2259241bc221", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:db1ebc7a-c91b-5eee-9345-955b3d76ccc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:6346b3d5-d2c0-5930-a5b6-8f1370887c28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:dae9ac36-2b75-545a-96bc-6bf3b5dbbd80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:96bb78da-0e3a-5400-9f57-65be0be9856b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:50a57320-22a7-55ba-9c4a-25a51eb237be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:cf44808f-d356-52ac-b1c1-7c813728d6a1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.9 of @angular/animations. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:1382521d-2b5a-549f-83af-561a37050d08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 5.2.11-tuxcare.9 of @angular/animations, and is fixed in 5.2.11-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:6376dd90-b0d5-5a2f-a3b1-acac88d70836", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 5.2.11-tuxcare.9 of @angular/animations, and is fixed in 5.2.11-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:ce81d384-bfb8-5338-929f-700cb8132adf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.9 of @angular/animations. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:77e33e57-96f0-5650-bfca-504f3880e35e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.9 of @angular/animations." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:2e6fa47a-b192-54f9-b42b-f40b73cb44b2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.9 of @angular/animations. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ], "bom-ref": "urn:uuid:c227760d-4783-5f2b-8714-e2bca6cc865b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.9 of @angular/animations." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.9" } ] }