{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2392d666-45a4-54f7-820f-17cb0b0d689e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/common", "purl": "pkg:npm/%40angular/common@18.2.14-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9", "version": "18.2.14-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:c4aa4768-b7b8-5de0-8e91-4a47b94e546f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.9 of @angular/common." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:fb837259-cbd3-597f-9bf0-059308d60d04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.9 of @angular/common." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f8f1ae16-712e-54b5-ae4e-1fb2f7498a40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.9 of @angular/common." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:eca3d820-be0e-5f05-af25-3f19fd443ffd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.9 of @angular/common." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:82c5181e-a795-528f-8b49-1210a93b2987", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.9 of @angular/common." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:954af959-a0e3-515a-bf13-187a11b257ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:296a5da8-808e-5b09-bf19-46c7a0a318d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:e79f6410-df7e-5bc4-b796-d4fdb5b01f2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:338614be-5ae4-5766-ad36-5367b95c380d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:df974e7b-5e87-5acc-a4eb-45125ff2c94d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:e4f1299a-af88-5dc8-80ec-c66e889c93d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:cd82d123-0493-5902-a062-41d2e87f4b98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:525ed7a2-e0e9-54f6-a2e6-31c24f8a1db1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:1a63792b-55cb-5b17-8224-e57699f42950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:5364413e-3231-5152-8509-de184c143ff5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:05e7d407-a1ff-5413-b9e5-9581a450473d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:e7e78cda-01ba-5f8f-b96d-304c657d83d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:5e8224c4-fff1-5a15-b9dc-81b837dd642d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:cdf89642-d5f3-5c90-be35-738d8e39c28a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:610a54dd-bd7d-5020-88af-4d64e911ea13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:63d1d880-1182-5d5f-aff4-c1eeedf6f5e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f5e81c37-0be2-5096-8aa1-906ea7301b62", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:347c2289-1a2b-5c7e-afbe-5ef9597a6bbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.9 of @angular/common, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:234b95d8-e6cc-50c9-931b-21783c8fc006", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.9 of @angular/common. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:7c918b16-77d8-580b-91b9-427822a0c5b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.9 of @angular/common." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:7477adce-bb31-5cc2-b8c3-d28d25f41978", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.9 of @angular/common." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:2a0cfaa7-27fc-5cf9-82ed-134419c3bcf4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.9 of @angular/common." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/common@18.2.14-tuxcare.9" } ] }