{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bf883738-6504-558a-8b53-8b6390097bd8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13", "version": "17.3.12-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:1f26d53b-dbb6-506e-98fc-e3d1959eca9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:c1c2c521-0296-54c6-a35e-c6cc1d8a141a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f40f80f2-0c32-5c2d-9a00-2db5cd3e00db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:b754e1a8-c087-504e-9f53-ca31fcccc72a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:cc7c5903-5532-5f98-9081-c8e27b889d21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:68b5697a-2e9a-56c2-8720-06f242b5be6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ff07e791-fb7d-5909-a066-0914df6a94af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:882b540b-b23d-5122-9192-4400221baa60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:29d3e018-fe42-5de2-83f9-ce0441a868e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:70fef572-ed5d-51c9-b1b3-176396f4d850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ea8b397d-38ae-5abd-a1b4-994d51aab440", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:30ca2f35-40f5-5632-b9ab-1f75723fefb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:d2073e32-7a29-5e8c-9e32-30f0cc0c1c3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:446f88bb-38b3-5a27-a4c5-61dc52235de4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:cf5b9f6e-49c4-53aa-bd00-16a173c27bd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:74e87117-d4a7-5525-b149-631c0dd43ac7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:72a5e28c-70ac-5188-93c5-038c64859061", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:de92c5e7-67d5-5c78-9ed7-d84eec21dcd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9f6c98e1-79df-58aa-9f8f-00186186fb97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:134885bb-2e5a-54c7-aac8-efe12adedbb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:929c8505-f553-5c93-8268-2d088cf4e787", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:54c8408c-9987-5702-a1ab-ab19ae342fd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 17.3.12-tuxcare.13 of @angular/compiler-cli, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:35ea31ee-2725-52b5-805f-ac5d9cba18aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 17.3.12-tuxcare.13 of @angular/compiler-cli, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:122354b1-baa5-576f-aff5-aa723f2667ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 17.3.12-tuxcare.13 of @angular/compiler-cli, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a27011eb-6b86-5081-bea2-4f7f11720edf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.13 of @angular/compiler-cli. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:74057e9a-599e-50b7-bd91-00ca6a55e599", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:948efe3f-0a86-55d1-9d30-919bb4a33408", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.13 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a0b9d841-0701-5b80-abb1-814a3184f6a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.13 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@17.3.12-tuxcare.13" } ] }