{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:af88914a-c8f3-53e8-b4fc-b8a920414fcd", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/core", "purl": "pkg:npm/%40angular/core@18.2.14-tuxcare.3", "type": "library", "bom-ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3", "version": "18.2.14-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:3ddce14d-d6c8-5080-bc6e-b2943b29ef5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.3 of @angular/core." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:939b8611-5fff-5d70-993b-2a8d34863c77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.3 of @angular/core." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:51e6fd6b-0f37-565d-99a7-6725cb051a0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.4." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:fbe50ee5-cf25-50e3-85c0-12082917188c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:da5c8289-7275-55e8-9aa9-6a765cb3403e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.5." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:dfcf6214-aaea-508c-b6c7-86beb62fa957", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:0460609d-7e72-54a5-8d4b-23b2d3ae2988", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:5ece03e6-e546-5168-a3c2-11d4d3c0cf77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:f7b35d8b-2dc5-5d9f-8bc1-83f0760d5698", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:784eb728-63c1-5aaf-b6d7-a75aca1ed49b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:53d10e8d-3765-5caf-a565-032d001e069e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:3aa5f37f-e02a-5560-89ef-cc57ec4c69a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:ec56516c-d5fa-55b3-8841-493b16d7a8ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:fb055dad-f93c-5b4e-b197-20d26181b4d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:9145b4e8-caf3-5967-bed7-1ac5adf56e4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:00b3aaf9-43f0-5ca5-be93-d7e9c2391d48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:cee473a0-1c38-5101-af98-7ee3f658f407", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:e5d8dcdd-923e-5502-a113-c42a43b75a1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:824d73b8-dffa-54bf-963a-707d7eb52deb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:caa8aaca-1ea8-541c-90a6-3c07f77c2a68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:84432ba1-2e32-59e9-9a0d-3d6e5184d892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:59ff21e1-8360-5c69-86da-6509dc73c968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:c3754782-c5f1-52f8-98ca-0fad22d324fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.3 of @angular/core, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:56f1708e-3b17-5df0-b38c-5e8c0d74c272", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.3 of @angular/core. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:889d87ae-3193-5f97-a15b-743c44bee47d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.3 of @angular/core." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:1f720758-186e-5859-a56f-388f2976bf1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.3 of @angular/core." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ], "bom-ref": "urn:uuid:1c769c47-86bc-55bd-afc7-563d50c2c326", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.3 of @angular/core." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.3" } ] }