{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1e131943-4ae1-53b3-afc7-1ce0856c4771", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/router", "purl": "pkg:npm/%40angular/router@18.2.14-tuxcare.1", "type": "library", "bom-ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1", "version": "18.2.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a519ac32-5b61-50f7-b3a3-9d20dfeeb2e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.1 of @angular/router." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4f234309-37b6-53d6-8623-c8976e2e40c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.3." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:474ae446-3a98-5c29-991c-3e922589ff94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.4." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9a10324a-3ddd-5a64-8988-490e9a60c94f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:cac3a24f-29b2-564f-8b56-face2356afdc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.5." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6d3f41ce-2bd1-5ecb-9c30-37d83525a0f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:44106283-28e6-51b0-a1ae-c1425a618968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1a11682c-36cb-51d2-9ee6-a934bddfc926", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:386dfa6a-2729-5fff-9d2f-0edbeb5a7389", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:fd199f82-e616-5e12-89a8-94c8b25a9187", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a00223b4-4cb0-5ed8-a939-ec8d01631bbf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d10c2b14-ed4d-5e7d-9cc5-214330aa15ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:78b90109-40d2-5a3b-b9b9-e12248a6430d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:127f459d-e53b-55ff-8aed-db78c3c9b306", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9ac74760-aadd-59e0-9372-a3435eb4b7de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3cbeb20f-0875-5d1c-bc99-145e7f4df74e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c2ed4d9c-bbe6-53ec-9078-3e1f119d5348", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d390a1b4-533e-5391-8687-0852700842be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b0efdb19-9fa3-50a5-8ec5-88ff06f43962", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e6991722-449c-57d8-8669-6a3a1cf20896", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e1a70c3f-9a80-5759-ae6b-925d8d59e79f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:cc594c81-12c1-5859-8f88-33b8a97a5100", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4ea63488-ae81-5c30-a290-aa25f5b9dff8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.1 of @angular/router, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1198b2ef-92a9-5270-a9a7-fc149733fbd8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.1 of @angular/router. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a844a582-a840-5fa4-9206-3aad655442e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.1 of @angular/router." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f2e57d53-a6bb-56a1-ab3c-5d6c610f08ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.1 of @angular/router." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ], "bom-ref": "urn:uuid:88e71250-8969-578b-954a-2584b3b2f7db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.1 of @angular/router." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.1" } ] }