{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:99a475f1-f630-5d30-924b-3645e200e4b6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/bazel", "purl": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10", "version": "18.2.14-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:6d74b99c-0eef-5e9d-85cf-9849ec3a9486", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.10 of @angular/bazel." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:733005bc-d516-5693-a3e6-de8b5bd2bf39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.10 of @angular/bazel." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:25b08700-e633-54ba-b7c0-a912d8a35b6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.10 of @angular/bazel." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:dfab4282-0c3e-5a67-ad68-292b76de864c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.10 of @angular/bazel." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:94b52c05-b691-5dc5-97ac-535ee53ea6ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.10 of @angular/bazel." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:3cd634e8-a303-5f03-b737-86a00c0baa91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.10 of @angular/bazel." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:0613aa94-36ef-5417-9da7-bf9707b8b21e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:9d8d0eb4-9ad0-5674-96e1-397a648013d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:60e26d36-f3b2-538c-8474-49923ab18a17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:bb3a98d1-73f4-57ee-bbc1-f136becfe803", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:1508f08d-7dbe-55c2-9914-e38d079206c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:29746165-9555-5e29-9b9a-058b61d0d115", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:86b093f9-b76f-5a46-ad7a-e7f3864146c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:de794c38-f755-5545-b490-be15d673a6cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:38882f21-c1eb-5f44-a0fa-52e480a5d196", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:43f4fb36-f648-5348-8ddb-66a37e52151e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:4829d7a0-2c48-5ad8-a305-cf30236f480b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:87b2baaf-a131-5d97-aff1-e80969614222", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:6d4f62ac-0ea0-55fc-9bd2-17060c3e9b3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:86f62585-5b0c-59e7-ab2a-469bcf0b2e72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:4ef4581f-8d51-5636-8b03-96a66cafbd50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:1b0d2c50-fd8d-526d-819b-6565660f80e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:4c5aec81-a6a5-5325-a936-9a976e6e44e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.10 of @angular/bazel, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:834b89b1-f623-5eda-9e32-4e759e764f07", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.10 of @angular/bazel. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:c2878c87-fa61-508a-9f83-e2c7f7271d4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.10 of @angular/bazel." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:7224c7ef-9451-52c2-9613-89210ab0f981", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.10 of @angular/bazel." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:d4da50bf-ab95-5604-8bd8-ba4c3c12bae5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.10 of @angular/bazel." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/bazel@18.2.14-tuxcare.10" } ] }