{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ef917fad-c85d-5cbe-aaee-5b807c7020a0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/forms", "purl": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10", "version": "18.2.14-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:35cc8629-76f0-52c6-b7db-32acf95eeb6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:5bbeadea-7544-5024-9a12-ae21e3b9b9dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:f285a462-147a-57e3-8644-cddd7c7057ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:ff654294-08b8-5cb9-9e75-3ce29eb921ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:f6683bee-bba8-5ccc-93bd-992afda48c61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:31fc43b4-ba18-51fb-8c88-a13170ae7a87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:d776ba19-f8f5-5a50-9b2c-a688db8af336", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:9b53015b-1e16-5fd3-a1c2-fc84b2797792", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:dff16f4f-1893-5ef9-b28d-f0503a75032d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:c3f95776-10f0-5ac6-a656-d2ac3ac4daa6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:fbea6cf4-7069-5558-b016-2f0a51d7eb7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:8c9c58ee-22ea-5df5-b9ce-713d397943a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:665b756a-df7a-571b-93f4-90cd66f97eea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:a9752054-1567-54b5-bd9d-07183aa9a6a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:3c4d150f-4b8d-5d8b-b2a1-e68bf1ba3848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:bc384478-ac28-5678-814e-b2d7b41a5f09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:3be82265-0567-55d8-a848-8372658bd859", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:edb0bdd3-54f9-588e-9abc-db18e175fbfc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:ca41303d-f18a-5335-8d49-3234c1961ec8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:4e787fe1-45be-5005-8afd-a201ed008b41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:1181a62b-24e2-5c62-b429-7e00c6d69c79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:ae813f7d-57e1-5325-8034-2fed33f84e83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:6a19aa52-5f22-56c6-9e46-e608cf140981", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.10 of @angular/forms, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:2e90569f-e65f-52c3-b0de-dc479819131f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.10 of @angular/forms. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:ef768a88-c7bc-5c92-8665-f07a740f26a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:051a2ed7-7fee-5381-a91f-52638d21ef94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.10 of @angular/forms." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:6349f4bb-f758-5dbd-9d4d-2f48615af083", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.10 of @angular/forms." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/forms@18.2.14-tuxcare.10" } ] }