{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:712d827a-b182-5b7e-b747-fdfb2e4aa950", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/platform-webworker", "purl": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1", "type": "library", "bom-ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1", "version": "6.1.10-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2021-4231", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:19ba57a4-36e0-5a7a-95b3-558b8c058086", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-4231 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.4." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:86c0e57a-76bd-5bf7-b15d-15510e74ecbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66035 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.10." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:ee46b1d7-795b-57cf-8679-4a11ac2151d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.4." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:0fb4b18b-04db-5200-b5a8-0c8402248612", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.3." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:ca5ff535-f259-5be2-945e-6425c82b7c94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.6." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:d5ebb7c3-65ee-5cc3-8345-51881b8d86a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.8." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:04320d0b-3975-5e2d-b168-e7dfa42c9842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:7ea669a1-a985-5f19-acf6-0e63449e64e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:c6c25f3f-c111-54ab-9f56-a7bc9590d11f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:e74243cf-f579-5354-863b-7eeff9624369", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:70fd4561-904e-5093-9cb3-290177a5d516", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:634e6288-97a8-5393-84db-58c3774e5376", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:705e898a-7839-5aea-95d5-c0843048c122", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:d7489c9f-f298-5554-a74f-0b98104bffbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:f6ae4083-d7e0-551a-a991-417bb4c52960", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:d66e3294-b9ef-50ac-a800-1c05e2e7f547", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:dfe21ea3-2129-5842-8832-c4a112aaa959", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.8." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:6fddf89a-d34c-5920-a7f9-4df3fbe9a990", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:1089cf15-253e-5de4-8752-4b08f2336b29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:596a4c98-c912-5406-9ce0-968eb65ec606", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.9." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:52c79e2b-883e-563b-b307-6958e527991e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 6.1.10-tuxcare.1 of @angular/platform-webworker. not_affected \u2014 Angular 6.1.10 is NOT AFFECTED by CVE-2026-68945. The vulnerable HttpTransferCache feature does not exist in this version \u2014 it was introduced in Angular 16.0.0 (April 2023), more than 5 years after Angular 6.1.10 (2018). The vulnerable file `packages/common/http/src/transfer_cache.ts` and all related APIs (`provideClientHydration`, `withNoHttpTransferCache`, `sortAndConcatParams`) are completel...", "justification": "code_not_present" } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:704b0097-77b9-55ba-825d-090f4b38820c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.11." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:d65528de-0c2e-5282-b9e5-3a6aea71e9b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker, and is fixed in 6.1.10-tuxcare.11." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:6bea103e-4aa0-5e3c-b497-9bb99ed05e9b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 6.1.10-tuxcare.1 of @angular/platform-webworker. not_affected \u2014 Angular version 6.1.10 is not affected by CVE-2026-88056. The vulnerable code pattern (url.ts with parseUrl using String.prototype.trim() and relativeUrlsTransformerInterceptorFn interceptor) does not exist in this version. These components were introduced in later Angular versions (post-6.1.10) and subsequently fixed in August 2026. Version 6.1.10 predates the vulnerable SSR URL resolution arc...", "justification": "code_not_reachable" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:3ee8ea04-2aaa-5e19-aff9-f5e3230d1716", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:57c6b274-8f85-526c-8a2f-dca27336f92d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 6.1.10-tuxcare.1 of @angular/platform-webworker. not_affected \u2014 Angular 6.1.10 is not affected by CVE-2026-88059. The vulnerable HttpTransferCache feature, withRequestsMadeViaParent() delegation API, and modern hydration system (provideClientHydration()) do not exist in this version. These components were introduced in Angular 16+ (circa 2023), while the target version is from Angular 6 (2018). The vulnerability requires automatic HTTP response caching duri...", "justification": "code_not_present" } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ], "bom-ref": "urn:uuid:d2c628c6-e77a-54fa-af2d-c44850186706", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 6.1.10-tuxcare.1 of @angular/platform-webworker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-webworker@6.1.10-tuxcare.1" } ] }