{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4637a55b-ac03-5ff4-a979-83cf324fce3e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/compiler", "purl": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8", "version": "18.2.14-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:23aaf083-4671-562f-a552-358bd24ac242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.8 of @angular/compiler." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:eb28c093-b57c-5bbe-91ae-3bddd7d28d63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.8 of @angular/compiler." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:201aa99b-3f14-5428-9a80-88a26eb663be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.8 of @angular/compiler." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:46ba9b8a-2c6c-5203-855d-92198e1e1099", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.8 of @angular/compiler." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:c3f64992-04bb-5c49-8df5-5d29ab314d11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.8 of @angular/compiler." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:862e6af6-c871-5b8e-833a-bc1b1ab2edb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:48565e09-d560-598b-ae16-8960a93eed98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:3544d143-6fa4-5ca5-8145-b041342f0915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:a1a6d76d-9568-5b48-88de-9a12a953fd0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:f094ce49-6419-5ffe-8545-7b93866b8e00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:9879564f-6430-5613-ac34-d8d7a10dfdc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:f74b8724-3241-54c0-8602-fbc3a291aef9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:013b9c4a-3ab9-5ae1-8954-8bcc4bb0ffc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:29a4c8a3-6ded-5136-aee1-00d88f69e558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:813d01b2-a945-5dbb-9e96-aa3005139a1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:fd74dedd-4b28-5e2f-bd55-150ea299c6b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:943c4820-bd72-5619-b25e-b42867669952", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:b0ba2252-11b3-53c8-9f30-4d9623c1bb8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:2f68f0aa-8f1f-5d2d-b0bd-4f359985726a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:c8562263-f017-5eae-87ba-72c02d037b7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:2cbc0741-fa45-527b-bfe7-8ad39d3ae5ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:cd788c00-9a80-5030-87fc-ca72f0d8c6c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:f8c4a0ad-6442-55a6-b396-4f0f19deea1c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.8 of @angular/compiler, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:32c3ee53-8126-5a38-b0cb-d797afb5f5d5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.8 of @angular/compiler. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:09e9b22d-1b56-5b1d-bbcd-92c9e239be14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.8 of @angular/compiler." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:cd1148df-83b2-5794-8fc8-8c048bcc0c36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.8 of @angular/compiler." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:5deb6c85-0ae6-5ffa-8d2d-5ee465fae2cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.8 of @angular/compiler." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler@18.2.14-tuxcare.8" } ] }