{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:88a396a4-45dd-5ed8-8652-80d8c17caa0f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/localize", "purl": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11", "type": "library", "bom-ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11", "version": "18.2.14-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:23687f8e-ff75-5459-b662-696b9181e90b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:1e10570e-74d9-5bac-af4f-f3b83814c3ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:71493eba-f7d1-573e-8e25-c1719ef64ea5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:37709c34-0641-5941-bb66-81cdecf00ab2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:4cd6587f-07c9-5a08-80db-d0f5b80a8bb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:aa942ec7-9850-52c3-8c44-bcfa9bf88098", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:c2b767da-27de-5fd6-891e-b2b49772d7fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:e5ac8f45-3464-579a-8457-5f7fa1dccc02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:20a115de-92b3-511e-8d8e-87665b1f570b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:8cc6f4d1-dcb6-528e-9a3b-80b7321403ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:d0be279e-3250-5593-a549-c95b8a573fce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:7f2d70f9-6ade-5b1b-b32f-b16ac1e8144d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:d9e9a86b-6a82-52c1-ad3a-382d376b1408", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:41e9be53-5775-5f34-b282-2760d278dfab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:b4562216-a63d-5269-af6f-05165fa301cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:5f7382ec-5902-5993-abfc-27595b5c2449", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.11 of @angular/localize, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:43fff2f8-267c-598e-9ab7-33afd931a355", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.11 of @angular/localize, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:659c1b3e-5867-52db-b5b6-eb358da46f0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.11 of @angular/localize, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:f7fb776a-cf94-5813-8a75-bca9b078915c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.11 of @angular/localize, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:55bf94a1-be04-59b6-9f43-45b2d31f5eb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.11 of @angular/localize, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:880a037f-9bdf-5fd9-9eae-c0530ca2fdb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.11 of @angular/localize, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:e3fa8e3d-a60a-5e75-b256-9b90dc986fc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.11 of @angular/localize, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:0b43ba5a-6aac-535e-bcf2-947dd8ccb234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.11 of @angular/localize, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:b59041a5-276e-57e0-b95e-f59ef793d7f6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.11 of @angular/localize. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:ebca1fdb-b0d0-5910-b85f-cd2cceff98e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:2f47f833-8938-5dac-a69c-56e759d738d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.11 of @angular/localize." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:72ce9ed6-61db-51ac-8584-652e4428c88b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.11 of @angular/localize." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/localize@18.2.14-tuxcare.11" } ] }