{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:82eec4b9-ed63-51d5-9b08-ea7a2f3e482d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/bazel", "purl": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13", "version": "17.3.12-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:74beacba-34d4-5c8b-a267-d3baa7186dca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:150be576-d12d-5a34-bbc3-73eac1e210aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:50c427e4-7cda-5977-9a62-cca90f8d589f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:13ec9de2-4c3b-5226-93c7-0515e31fc09a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:60365be6-0746-5791-961d-dfcc22dbcbe8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:47e9ed94-ed16-5e40-b82d-b13b52f34a3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:c9d0a314-b1e0-54fe-8466-3e53128a2628", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f099b4da-1585-59f4-a8f0-e730e98ac7f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:1542be94-8e04-5201-8b61-3c374d4cb09b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:885690ac-6b83-51ed-adec-ce46a8bf9bcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ddc2f1a3-0d23-5a59-93c6-5e8c09be645b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f4baf4b3-73f1-5350-a997-b8044c28ecfd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:1c2d7364-c7b4-5371-896d-4854529c9b29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:701e41e3-7cfb-57ff-8e4a-cc5a09d94903", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:dc5739f0-6727-54c5-8197-ec7cdf921105", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:beec494e-5b91-5fe4-a3af-b2020ae4badf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f8cd3e5d-feed-5d29-9d47-ee1986cd6b9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:71844eed-810a-544b-93e1-5eac69ec930b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:13bbc40c-07a4-55f4-ac55-cfee21cd92ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:7ec93164-3d38-5438-be02-7bfdeba4cf45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ffb775d4-4144-5c62-9224-d6bbdd80f702", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:372e2055-f4e0-5101-a1a8-ee1eb2f437f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 17.3.12-tuxcare.13 of @angular/bazel, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:3b9d3957-ede5-56b1-8324-4c4e54ffad78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 17.3.12-tuxcare.13 of @angular/bazel, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ef0b4f08-2024-5f55-847a-0ec2fd411963", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 17.3.12-tuxcare.13 of @angular/bazel, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:7d42b511-06f0-51d5-9a32-d6dcd6593876", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.13 of @angular/bazel. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e3a78437-dbac-57e2-84c4-2fb7dffc4b92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:6740caf1-f45b-586a-9731-f50a6865786e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.13 of @angular/bazel." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:78d8907a-b5ee-574d-8c0a-e8da3092683a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.13 of @angular/bazel." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/bazel@17.3.12-tuxcare.13" } ] }