{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7ecd166f-9156-5e3d-ba19-c301d854e99e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler", "purl": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10", "version": "12.2.17-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:ef8210ee-2d60-5b8a-8edb-ccc100670f9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:1a7fd148-b047-5444-b0dd-58d8a83c6823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:cfa00591-fbd6-5954-b658-b87bc2890820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:671583c4-ed30-5769-9fef-cf5f037eb23c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:b0ed60f1-3bb2-5102-aefe-15f521bf530c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:16c2ddbd-e5a3-511f-be7e-548e930e8047", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:291e0318-1c3b-5120-a8eb-c5d08501a5b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:9d5a63ed-a7f9-518a-bde5-fba9a23c53ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:89f13521-f3c3-5369-b363-d5ea66d8676a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:e00f2c55-4158-5afd-80c2-33ddbf7adac4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:feb817a5-c95d-51ab-8689-6aed39ec08ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:18ff45b6-0ff7-5467-b521-a3a35a817212", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:e8ac144f-8c51-53e1-af1a-818e8575d11d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:5952024b-ee2e-5170-8127-d3c6b74369e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:09253d45-651d-57d5-961f-0cee18504b4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:22d3864d-10c5-552c-a19e-2ff7f128b122", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:bfda22db-15f5-51aa-849f-94bb516374de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:42f18366-ffdc-5691-987c-2cfc010ac6b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:c20d1d93-39da-55fe-a1be-87625b83563a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:d5291990-6278-5232-99ec-f417608504c9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 12.2.17-tuxcare.10 of @angular/compiler. not_affected \u2014 Angular 12.2.17 does not contain the HttpTransferCache feature affected by CVE-2026-68945. HttpTransferCache, which caches HTTP requests during Server-Side Rendering (SSR), was first introduced in Angular 16.0.0\u2014approximately 4 major versions after the target version. The vulnerability concerns cache-key collision when repeated HTTP parameters are serialized, but since the entire HttpTransferCa...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:aad36c23-691a-51e2-bafa-aa9d59dfee54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:1b12592a-d93d-5b72-94df-fa54b2af0359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:a9bd9faa-895b-5d76-896b-e3a240b607be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88056 affects version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:f97bc842-efa8-5fe8-9cfb-357de3841f89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 12.2.17-tuxcare.10 of @angular/compiler." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:9fc08324-5c2b-57b5-96b3-e2d8ade82d55", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 12.2.17-tuxcare.10 of @angular/compiler. not_affected \u2014 Angular 12.2.17-tuxcare.9 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, withRequestsMadeViaParent(), and provideClientHydration() features which were introduced in Angular 16.0.0. This version uses the older module-based HttpClientModule system and lacks the entire SSR hydration transfer-cache infrastructure. The vulnerable code pattern described in the CVE do...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ], "bom-ref": "urn:uuid:7afc3bd0-14bd-5fa5-8c01-2109bd5a9fbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 12.2.17-tuxcare.10 of @angular/compiler." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler@12.2.17-tuxcare.10" } ] }