{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:135169fd-5dd8-5226-9ac2-78d23d4fd6f1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-browser-dynamic", "purl": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2", "version": "18.2.14-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:c8aebb7b-3c4f-56e2-aca4-16a2a72d8ea5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:da695d22-bae7-5967-b740-1dd1beefb1f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.3." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:8198d865-3fa4-51e5-9e80-22323c705be9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.4." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:d3619d78-3cd6-5faf-8875-6ca6a160ace3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:84571cab-12ac-5cca-aa9b-e55aad6229ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.5." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:8333d1cd-f20f-5e15-9943-3ccc7bdf7ed1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:2def214b-9a30-5de9-b2e7-f56e1002b247", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:139c5116-1cbd-5851-a317-9cc1c35ca81f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:5f07e5a5-d36d-5072-af79-a21a51e72b5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:c7d233a0-8cf2-5f99-a7cb-6f5476a26bf9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:0dfcd96f-4b31-552f-9e20-97b9bbe9bdb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:852186d0-80d4-5133-9208-9cdaa630e9b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:a23225f3-abfe-5613-9a19-f73050cc329e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:311e26ba-3a72-510a-9b36-1042d6c710c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:dd4b7a04-1114-5435-b12e-ceadd55fa2f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:5568f5d4-f013-5f21-b1fd-5a6338ca8049", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:5254aa7c-560c-59e6-be4e-7bee72f26083", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:1b6703a5-af5a-5848-bfd2-ad1e498dfcf6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:a174d3db-c18e-553f-a581-4e2a145351e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:9c0a4899-9544-5d25-8510-142a44a8f2df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:6a852e34-fabb-5882-96a7-7270194506c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:39d48c5a-2ab5-5454-91d7-ff3352b263f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:d3259ddb-633a-5af1-9a46-affd4df3172c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:1544ae10-ad6b-5a2d-9975-707c667cf00a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:8fe473d3-0b02-53da-b309-0a7eed9776fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:d09603b8-2564-50ae-b625-22343a4a28c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:cc9715e0-3151-5bce-9df0-f0f1e434088c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.2 of @angular/platform-browser-dynamic." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@18.2.14-tuxcare.2" } ] }