{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b171b4c2-0c95-565c-b9c5-37d0b6e338c0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/router", "purl": "pkg:npm/%40angular/router@17.3.12-tuxcare.13", "type": "library", "bom-ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13", "version": "17.3.12-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-59052", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a4f3331f-46fd-51ed-8f83-3cda440ad5b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a3659384-c828-5f1e-ac9a-ef160d474a51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:3b2f4257-55bb-571c-bbf4-9aaed395a421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:2b5bd079-f3f8-51eb-878d-9b7bc127ab2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a790a999-011f-5f1a-b9d5-84f2c74f9138", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:a4105333-6615-537c-aa59-193dc9493db0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e1321f4e-0e0a-5674-b126-80f7c81774f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:f23d5cce-df5f-5091-843d-92280cd57273", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:462f0637-6604-5654-9cf9-b3b41d05067c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:8b8141c9-c304-59a0-9960-d3532e6f25ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:ccb398c1-6c0d-53db-9376-1c6378def9ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:7bf2a9eb-1ed3-595f-b866-091fce6a8701", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9b6989de-6e5f-5800-bbc5-acb301d84aa9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:0d3aaad0-df20-5650-bf2e-6cb6802d7ac2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:21b50956-48ca-5a14-a167-471c66a9500c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:8f8f5469-aae0-5d6b-8617-9c99947b1890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:33e09f20-1fd6-5509-b944-d9c5f6dfe047", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:fa721e5c-d68c-5b65-bdc8-bf14e893bf97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:9ba1b522-20fc-58d0-b75f-eaf3a33b1fd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:83c057a3-9607-54c9-b83d-e09bcfcddd7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:03577d24-d788-5892-baf4-3548949855b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:8c6e4b72-3c79-507f-aea9-00a3e997446e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 17.3.12-tuxcare.13 of @angular/router, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:50e51725-2871-5065-a309-dea098dda1f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 17.3.12-tuxcare.13 of @angular/router, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:e68c4a92-acac-5724-951c-8eaec9b69fa9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 17.3.12-tuxcare.13 of @angular/router, and is fixed in 17.3.12-tuxcare.14." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:99bdd228-c239-5484-9718-65a21f8c88cf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 17.3.12-tuxcare.13 of @angular/router. not_affected \u2014 Version 17.3.12 is not affected by CVE-2026-88056. The vulnerability involves String.prototype.trim() being applied during URL resolution in Angular's platform-server, converting validated same-origin URLs with Unicode whitespace into cross-origin protocol-relative URLs, leading to SSRF. This vulnerable code pattern was introduced in newer Angular versions (v20+) and does not exist in version 1...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:6c98bb12-45bb-520d-bced-73b1fa4a88fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:2b175dfb-4288-5a37-a3b6-fd1c16d46b61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 17.3.12-tuxcare.13 of @angular/router." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ], "bom-ref": "urn:uuid:42a80274-ec4f-525b-baa8-6c27093243b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 17.3.12-tuxcare.13 of @angular/router." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@17.3.12-tuxcare.13" } ] }