{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:55f5796c-41d3-5586-88fd-f264932f13e1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/elements", "purl": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2", "type": "library", "bom-ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2", "version": "18.2.14-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:a720c3f0-60c0-5828-8ad8-683c3e32589b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.2 of @angular/elements." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:9be40182-dc89-5665-9771-9bc0ada16625", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.3." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:c49bd08e-1240-5129-824f-bfe903587c59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.4." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:62e7b372-0a38-58db-b275-bed2d67389c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:d67fbbcc-7a3d-5b4c-9c62-a436d42ec698", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.5." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:ad2f11e7-325b-5292-a73b-dd4583957288", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:95ea9f07-04ed-5101-87c8-4f312923d054", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:81a21c37-47c2-522c-a2e9-895283c697cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:76f34d2f-5a17-5d45-908e-18b2e6407b45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:364cd03d-9d02-5aaf-99ef-de8a41907b8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:5be71017-6587-549a-a059-cf3d5e7f8ff7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:02343dd2-90f9-563e-a5ca-95a21313b3cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:564cbd33-cd71-542e-a12c-7f5b30aeba4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:ec0fec4e-b852-50ff-8f27-facb43756f6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:138cb521-91fc-5cc3-9377-2bac706f12b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:4af8937e-bce0-5b39-b3e7-4f78a3461f39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:49df227e-7f01-58d5-8dc3-e984366dec00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:2e8c0abe-4bc8-589a-bd6d-2fd85f8936ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:0c01e6c2-4e6a-579c-84e1-66fd92156e93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:207df783-958f-5eb5-adb7-32155246efc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:271e2894-5d8e-59a5-88ea-e372c3b85b7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:9f39c58e-8a14-508a-bcde-4892d4601960", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:845d232d-0b29-51fe-9142-b554ca44143c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.2 of @angular/elements, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:8270001d-6093-560d-abcc-012f984fbed6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.2 of @angular/elements. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:b107a2c0-ee9c-5253-8c20-da8acac35f8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.2 of @angular/elements." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:cc78473e-526d-5f71-8049-b74f2f74907a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.2 of @angular/elements." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:156c9470-4292-5f17-9a77-f3ca8e020939", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.2 of @angular/elements." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.2" } ] }