{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:398dea97-da90-5f63-9388-bc4aff64ac98", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/router", "purl": "pkg:npm/%40angular/router@18.2.14-tuxcare.11", "type": "library", "bom-ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11", "version": "18.2.14-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:75a4235e-4bfa-57a7-9a60-64238e134acb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:0b86e454-8287-55a1-8f66-94e757eabad1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:48172322-5acc-5f57-af2a-56fa9ccafe70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:d17e605d-67a2-5a44-aaaf-e90a43bf661f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:e8e0f5c5-a3b9-5900-9326-d4c600ea7dfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:0e8ed6c5-a1d7-5264-9452-1c94ff20d2e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:101dab99-6034-5faa-b570-eaad85c1ea65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:f59d6119-063a-5bdd-865f-921dc3a87107", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:9351ff2e-47c5-5315-9ac5-0b1d638c7bda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:103bb298-49ff-52ce-82a0-bfd938a452af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:33f7c116-070a-563d-a802-4584fe111278", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:8572fced-950e-57e5-90e6-3f89887a40db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:069c07e9-a8cb-55f7-ab4e-09f70192302f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:9b04560a-68a2-5442-b26d-a7398aa2f015", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:437208f6-2422-5125-8aa0-09b8ff583032", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:09262767-58a2-5ef9-a85e-9d2f3272d8c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.11 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:39f2a527-af93-5811-bdb5-c9ddc8d33a4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.11 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:db48557f-33c5-552c-b0d3-0d43e0a5e70c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.11 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:6c5c3ed4-c7cc-51b2-b866-4f6eb1093de4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.11 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:a9c77728-1684-5d0f-8e32-b940524e3166", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.11 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:30d4aa63-1840-5ccc-91bf-175c471533ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.11 of @angular/router, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:50aea872-e591-5ad8-8abe-8828e86bbf9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.11 of @angular/router, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:ad779bed-675c-5930-8bed-e91a9693e4a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.11 of @angular/router, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:5eb62778-d81e-5167-bb75-9c231851febd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.11 of @angular/router. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:a87d2a11-ade2-503e-bf9d-e1a7294a0af7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:11d78ba6-9147-5226-b509-208735c0f0e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.11 of @angular/router." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:1bad3076-7698-53db-b45f-66508bd190bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.11 of @angular/router." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.11" } ] }