{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4142fc06-0414-542f-a489-c3e5ec6dbdc4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/bazel", "purl": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1", "type": "library", "bom-ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1", "version": "18.2.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:62353378-3800-5c5c-a06d-40198a5f3149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.1 of @angular/bazel." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:799b4755-fd76-574b-a934-9e373d8dae42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.3." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b13fa94a-9544-5762-94ca-24497178ca1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.4." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3a6f058e-ba1b-5dd3-a170-505bbf6c7b2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:07f28597-f096-57ba-89ea-4f395378fba0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.5." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:67e0e3a8-33d8-55f8-91d8-330cbe748b36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f740252d-9ec8-5a41-9320-ef49dd776a6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e2fd268f-1a87-5bcb-8d71-1a52fe554163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:dbed300a-ba5e-5a23-8c33-8911457b2cef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:53ee180b-4b42-5982-8727-4e0a191d7631", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d3ab9a48-feb7-5398-b1ea-c73170275b8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:cad497d6-4f38-506a-bc09-e84e3f608a9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:61d48cfd-a1e5-5ac2-ab7a-10a7414c4d10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:78e18478-580c-5837-b464-0c0c2c6ef504", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4a76c360-a2d9-55a2-b372-d8b825cd9646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:54f02b9b-b6fa-5e3a-b2da-56f50dab1d1c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e8e0834a-a0ff-5faf-9f1d-e4f9cf222129", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d698bdc9-a6c1-5371-ae75-7cc31c57f71e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ee21f2bd-75a0-51b6-86e3-248a89576a5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:53baa9bc-f0db-521d-96f7-dc68dc4091b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0392984a-7a2a-5832-b0fe-df25f0d6beca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:33809e25-5952-51a2-b4b3-64b7b96fed1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ea7da8eb-5b63-5344-9815-8b975bbfd661", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.1 of @angular/bazel, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:48ecc3a2-a70c-5134-ba01-0506fc8c57a6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.1 of @angular/bazel. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:48ab9afe-7ece-5ffb-a1d9-5d144de05f6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.1 of @angular/bazel." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b2de4726-754f-5e0f-8aae-498b766b80d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.1 of @angular/bazel." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1ed3bc07-22a1-51e3-91e1-61abcf165ada", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.1 of @angular/bazel." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.1" } ] }