{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:04603b5f-04f2-527c-b3a2-6d8d1d684d3f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler-cli", "purl": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9", "version": "18.2.14-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:75d1b4ee-156f-53ba-825c-62b6671d2f29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.9 of @angular/compiler-cli." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:ba3a75b2-09c4-5085-adb6-d65bb6981e47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.9 of @angular/compiler-cli." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:8196bef9-e8d0-5e0b-8001-c256a79592b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.9 of @angular/compiler-cli." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:239a68e6-d195-5ed1-a82a-f0d7de651067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.9 of @angular/compiler-cli." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:66d42c29-c99e-56f5-bfc1-53812393764a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.9 of @angular/compiler-cli." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:bd153514-4a35-5e51-a027-1dd5faf8f679", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:09cb3a8e-3f7b-5e43-8ccf-1bad78ddafd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:676073f7-d0b1-5386-a7ca-7197ca4d3496", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:b7dd14af-71b0-540d-aad6-03d2d3a7a04b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:a904554f-171e-5b93-8db7-e5a3c01f508b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:6039041d-af76-5ad4-8892-a184a9f41755", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:afa63c81-138d-52fe-850a-478976198506", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:525bedc6-e766-5268-b50d-81841ed5829c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:3d96a23e-6448-5068-bb47-f968f435d6c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:eb47a427-a149-58c4-a65d-c266d33c6959", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f4d966b1-ce78-57fe-ac66-5ddaa07ca3df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:a5057ddf-b3b3-579d-aff3-ca667e1ef686", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:92623301-3da9-5cb7-b976-84bee11c95ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:b61a0fd9-3d34-521d-9618-65259cb55081", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:61d20c2e-5f6f-509a-bbd7-d0824faba04b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:580c24c3-68d2-5cdf-a85a-8b158c233021", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:245b19aa-f7c2-53f4-b1f1-40d68066a34e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:7e3b8564-99ae-51be-a07f-fccf7c5b28f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:a5a62f83-1456-52de-aeae-5709bf928056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.9 of @angular/compiler-cli. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:6cfadc76-3d0a-5bf5-84f9-82fc99d907ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:c0a72a76-8d4b-51a4-90fc-dcaae60c2bd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f0fb3ef3-5be3-5e85-a015-9f633e6868f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.9 of @angular/compiler-cli." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@18.2.14-tuxcare.9" } ] }