{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:57eb27fb-60d7-53d1-8f1d-74f3930e24a0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-server", "purl": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12", "version": "6.1.10-tuxcare.12", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-4231", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:1f4ec464-b19a-55a9-b960-0a01b09daceb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:9a05b28e-e1cd-5456-bb99-871fce9a17c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:e5bbf62a-eb17-585c-915b-c7a4820a0384", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:04153ecc-d413-576d-8232-4e360e900fbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:3e9ba8bf-2a30-5cb3-a5c2-36c402fbb9ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:dfa496c1-38ed-534a-9ad3-6c576d0f5f5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:8fe9472f-de63-50de-8788-429f2df80f59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:282a8e90-4ad2-5391-9ca5-4825c3b55820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:cf39a168-32a5-509d-87d6-16e8dcac5fe9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:4c19f18a-42bc-5c61-804e-2fef62495cb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:addcfc68-cc22-55e2-b804-447610c34ff6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:ad311a38-23c8-51d3-baf9-9888d12aaa12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:d9fe6e76-550f-5bef-8b3b-651b8433f9ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:83e5831e-94d6-593f-860e-6fc791aa2b41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:2ed8f35d-c335-5ab4-b07d-7da11468f5e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:3a3fa0e5-48ab-5d02-bba6-665e7e8e3036", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:6dd07408-a178-5306-8e18-6de01f931e94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:65d96294-5215-5700-98e2-a86abe5377d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:233fb876-5b29-580a-a304-63719a0a77c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:e3378211-cc0b-5a14-aea0-e69d2c6e5753", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:300323fc-0765-51a1-a6e4-e58618145857", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 6.1.10-tuxcare.12 of @angular/platform-server. not_affected \u2014 Angular 6.1.10 is NOT AFFECTED by CVE-2026-68945. The vulnerable HttpTransferCache feature does not exist in this version \u2014 it was introduced in Angular 16.0.0 (April 2023), more than 5 years after Angular 6.1.10 (2018). The vulnerable file `packages/common/http/src/transfer_cache.ts` and all related APIs (`provideClientHydration`, `withNoHttpTransferCache`, `sortAndConcatParams`) are completel...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:f0b3e188-f8b8-5cef-be66-52917a1f8d77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:18230782-d95a-5130-8b66-4e8ed37bc0ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:1d5d187f-bd5a-5b87-bb3c-9d7bc4ed3878", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 6.1.10-tuxcare.12 of @angular/platform-server. not_affected \u2014 Angular version 6.1.10 is not affected by CVE-2026-88056. The vulnerable code pattern (url.ts with parseUrl using String.prototype.trim() and relativeUrlsTransformerInterceptorFn interceptor) does not exist in this version. These components were introduced in later Angular versions (post-6.1.10) and subsequently fixed in August 2026. Version 6.1.10 predates the vulnerable SSR URL resolution arc...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:2627354e-6b86-5a7a-a3c2-62a2067e9428", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 6.1.10-tuxcare.12 of @angular/platform-server." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:54e135f1-6d08-5f10-8bea-36233d064ece", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 6.1.10-tuxcare.12 of @angular/platform-server. not_affected \u2014 Angular 6.1.10 is not affected by CVE-2026-88059. The vulnerable HttpTransferCache feature, withRequestsMadeViaParent() delegation API, and modern hydration system (provideClientHydration()) do not exist in this version. These components were introduced in Angular 16+ (circa 2023), while the target version is from Angular 6 (2018). The vulnerability requires automatic HTTP response caching duri...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ], "bom-ref": "urn:uuid:8d880382-9794-5b60-9917-f22842097457", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 6.1.10-tuxcare.12 of @angular/platform-server." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@6.1.10-tuxcare.12" } ] }