{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:12fc03ca-b79f-58c3-a936-52f2abefbd91", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/core", "purl": "pkg:npm/%40angular/core@18.2.14-tuxcare.1", "type": "library", "bom-ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1", "version": "18.2.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4fd3be82-9c49-5743-a872-4fe2d8889163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.1 of @angular/core." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c2ab8976-8b65-54ed-bdb0-070d2cbff53d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.3." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:617f0310-6514-58c4-ab20-f6a4cd9ea8db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.4." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7168348d-5451-58af-b111-84e234eb1d30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:aeaff8ee-bd80-56c7-ab9a-fb0ea0094926", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.5." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e9d960f3-b997-5488-84b1-d9de2ba140d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:10a0b8db-0eb5-500a-90a7-6bc624f28116", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:39f9895e-be26-5a8f-86e7-7c196622317a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7b292c07-8b80-565b-8530-4fa4ac018113", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:dddbb001-6df4-515e-a90f-580968a5c57e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6ddbd622-276f-569a-b2c0-536a4f924242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5c203c3f-b8ed-50d0-afc1-3ed2fe1227ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4941d89f-00b0-5b73-8e0a-6b16bbd5a540", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ca0b64e4-28a5-5da4-98b2-cc4985a60c9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:56cd0ba1-2a6f-5081-ac1e-c10442ecb575", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:189a2bd8-2b53-5165-9918-ae2edcde9db9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:28aec5de-37b3-55ed-8ca7-69580fefe714", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f18da1b8-ae4e-53d6-b0d7-7ff5a3aae6ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c3776bf1-9ddd-53db-a8bb-fbc008e76430", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b33114f8-d73d-5871-a985-0a555f0877f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:987f74c0-275a-5c85-821a-82e0dcb80265", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1d281f2c-cb57-5f63-8a6f-13857a1759e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f995aaac-1601-554d-a834-6beb1e9c3d34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.1 of @angular/core, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4a4662ab-a186-5bd5-ae6a-8a684b6a2ac7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.1 of @angular/core. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0c265d4a-0aac-5d0d-8dc9-088c69b8e24e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.1 of @angular/core." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5c2492ee-382e-56dd-8fe6-13275df779b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.1 of @angular/core." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:00e621cf-2495-57e4-87d5-4525c53a2eab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.1 of @angular/core." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.1" } ] }