{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:58c34100-f670-52b7-bb53-8fe244de0688", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-server", "purl": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9", "version": "18.2.14-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:29a9bce5-7cb5-5913-8942-95bb828fd70e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.9 of @angular/platform-server." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:e8e6779f-bfa8-5155-86ac-a9da95cbd7b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.9 of @angular/platform-server." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:de621acf-b28f-5adf-9204-edce11168054", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.9 of @angular/platform-server." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:2e2b0009-05aa-5c04-81a6-5f017330fa29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.9 of @angular/platform-server." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:b47c54cb-99eb-596e-9985-84d0fb295454", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.9 of @angular/platform-server." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:2d788e0f-c3bd-51e1-b593-743747513985", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:8ee241b6-0c83-508e-a55f-a6e8a94626f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:164fd873-db85-5ad8-a2f8-48d6ac410910", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:f2eb672f-ea34-5250-a7da-d8d9b6557890", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:3f2927ae-d470-539e-80fd-576a5494ef81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:daf4c82b-9f46-54cf-888c-abad23917f70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:efdefc8d-6f6a-5e1d-a868-0dd4273957fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:b8840ddf-e413-5557-82cf-9357185c113b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:9bb689af-e705-54dc-b16f-02b423f12cae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:91056737-90d7-529b-a7f8-a0e2dcaa6a74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:be38a115-4174-5114-b6f7-c607f539a673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:29cb6a06-1515-5631-9ea0-dcffda870da7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:7973b214-4bc9-50c6-9fd7-978a57f5fb07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:27218735-712f-52e7-85ba-962034b901d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:5972294b-da05-586a-ba4e-e7adb280267a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:e848f879-77f4-570e-b423-26b65a28ad2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:7344dc48-7b52-565a-9c1d-3f147e368ef8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:1b55b85e-e771-5926-8441-5a8ea205d1fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.9 of @angular/platform-server, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:4f803889-b309-5174-9f54-68a4850cefa1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.9 of @angular/platform-server. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:60b013e6-169e-56e6-9975-437b10348dfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.9 of @angular/platform-server." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:aaf8fb45-6682-52a7-8b30-676dc6203f2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.9 of @angular/platform-server." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ], "bom-ref": "urn:uuid:47e19b63-c842-56fe-ba15-c96c9c89daed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.9 of @angular/platform-server." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@18.2.14-tuxcare.9" } ] }