{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dd222183-4c08-5861-a233-ec521adf41bc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/language-service", "purl": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8", "type": "library", "bom-ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8", "version": "18.2.14-tuxcare.8", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:e54ea78a-9be9-521a-b943-9386149c85b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.8 of @angular/language-service." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:42af1074-890b-58d4-adb2-af1019a90912", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.8 of @angular/language-service." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:1f2d716c-7788-593e-a3db-5fb381fc4ae3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.8 of @angular/language-service." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:5d7e877a-7057-5a5e-b0d3-7bf8c52d9c67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.8 of @angular/language-service." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:7f4e2c06-8990-5bde-a947-c97bcd201420", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.8 of @angular/language-service." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:5b2fb997-9124-5c59-b169-7b01d1762b12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:ff163a5c-6d6e-58b9-8482-a1d52ca4940d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:2841110d-f357-5029-8a4d-247319cf3d77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:4a29cfe5-8378-5b11-80a4-c229b6038467", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:e1ee2c78-2005-57b3-9c52-74237205f386", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:9e02ccc3-ed4d-550a-86e2-461c1b914a2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:65a2da2a-55b4-5bf5-91fa-c6eaa4a29084", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:38aafc77-8bcc-5262-a6ab-2126009539c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:9572a763-2312-59e2-a7f4-c24215dfc8f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:6cc5df67-c0d9-56f0-92b5-0e240ea209cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:bd4b71fe-7db7-5813-be3c-6a51b46e4de9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:727660fa-c53d-570a-a8a9-4ed88629c4fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:a80ec1ce-e422-5fc8-b3a5-3161b02325a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:15d1f2aa-62ca-5eb6-ba3c-f450c110a632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:2027fd5f-140e-55c4-8561-cc9c509e3c32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:74d21fcc-f146-5496-a57d-13f90ab6a699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:9bf35ebe-a34a-52f2-8863-3bd6a4de040b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:88ce4157-2f34-5f3a-8e71-45be032b4508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.8 of @angular/language-service, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:ad832ea1-4d4b-5a88-b64d-0eaae0d315c8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.8 of @angular/language-service. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:85527099-f878-5ae1-b5ba-5b5f86ff5e40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.8 of @angular/language-service." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:507cff5a-e386-5bab-872a-f8aa861b435f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.8 of @angular/language-service." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ], "bom-ref": "urn:uuid:f62ca61b-c276-5f33-8731-df4f9d0c8114", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.8 of @angular/language-service." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/language-service@18.2.14-tuxcare.8" } ] }