{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c75717c5-b073-57bd-bc15-92111e7ae560", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/elements", "purl": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9", "version": "18.2.14-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f56ef69e-35f1-5c03-aaf1-d3560783ba05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.9 of @angular/elements." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:98344841-8eeb-5484-b9d7-ebb5de3905d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.9 of @angular/elements." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:ac9544b5-ed4c-5d20-81dd-2fbdfc3776a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.9 of @angular/elements." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:32501d85-5f90-5558-8851-a06df28b958e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.9 of @angular/elements." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:8e12a681-9a9d-5066-824d-1b90493a1932", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.9 of @angular/elements." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f4277704-8968-515e-92f6-f6edc7fbd765", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:26480584-ba3e-587f-a8e8-16514241a608", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:a63370d4-15c1-50f8-9cab-1bdea97f69f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:6ddf1c12-83c5-51c6-add8-6e2c79996389", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:795b4f1f-c783-5bf1-a797-35b632e2942d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:005e3a97-d488-5bc4-9048-d2a99233984f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:2c92110e-cbaa-54a0-8ccf-79d1faea5db4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f49c3b7d-4c8b-5253-afa1-afa6f30576d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:d3a7f5c8-172f-5396-863a-86c5a1b87e67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:3972d1f5-3487-5c2d-ac3a-2b535662932b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f67bee62-f8e4-59b6-becb-5a182f28db8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:af868cd3-2384-5b36-884d-cd6f37bde934", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f17ed874-8a49-51e8-8585-8c5fc15db55a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:c4c3f7a7-02b0-5682-b9d0-dae961c7408f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:825f462d-b72d-5499-92a2-fe20092e9199", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:c68e1da0-237a-5621-8767-247b8206e9ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:01310ea8-b2d3-542a-8aa8-89b176af4b2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:3a9ddc29-4ec8-564b-9bd1-0ed50335d8f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.9 of @angular/elements, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:68b5a4cc-703e-5e5c-b823-57f918a71d58", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.9 of @angular/elements. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:5ab72b93-70dc-5552-86ce-e9edf39117d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.9 of @angular/elements." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:9bdbe5ca-71c9-5360-8726-fe6dd9bd91e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.9 of @angular/elements." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:fce778d4-4b3d-5b1e-a3bf-d0c1fe65ed58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.9 of @angular/elements." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/elements@18.2.14-tuxcare.9" } ] }