{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:80018264-3ab1-5a37-900c-76d2a2fcd381", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/router", "purl": "pkg:npm/%40angular/router@18.2.14-tuxcare.2", "type": "library", "bom-ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2", "version": "18.2.14-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:c4bed412-4a58-5765-9684-accd8df32c1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.2 of @angular/router." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:5779eb08-cf66-5fb7-85ee-79ca5f1a597a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66412 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.3." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:a54d94cb-2750-5504-9aad-0b3effef4eb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22610 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.4." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:9b01f638-1794-58db-ab31-a2e690ec4464", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:555e53cf-f39b-57d7-8cfa-fdcd76079150", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.5." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:f516035a-e546-570a-96f1-58994ac649f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:ea177d2d-5001-5b68-b3fc-f9721b6ace5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:4b166d80-690e-5f2d-a3ce-cffc25a96991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:7b0da2ad-025a-5ec9-aa3b-0ee2cacfde37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:a93d06c5-7095-52d1-87b7-348c713eba31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:29040899-589a-53ca-b9f0-c5ddebae9819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:3a4ca281-e04a-52aa-9a83-6fb8f210ba66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:af80936a-a872-5d08-92ff-29e8d3a29a10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:39cff78f-733a-50ae-8aad-58d1f043954f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:f84c8c93-0ff4-5ecb-8f21-4788d3d5aacf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:3bc4b32b-4246-5cad-b331-18fcd3b7dbf5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:643118cd-3658-5a50-95bb-18c52b43eede", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:1c9e0849-3639-5d43-add6-22f96cac6633", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:c8708c76-3fad-5efe-ac5f-6290dce510ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:6e6272d5-3394-57a7-95bb-673385b54b45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:1956a208-a820-5dc5-8b15-d3f7abfd20fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:e14b1271-0ef0-5b8f-b2ab-2c875db98ce1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:a0bb9347-f619-51ce-8bc4-0aa10b3633b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.2 of @angular/router, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:8b646c16-c9d3-5e96-8298-85453737e2d8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.2 of @angular/router. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:a2f4951f-077f-5e79-b54c-3b75a996499b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.2 of @angular/router." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:640c90ee-1dfa-513a-8f04-43a2d2c906fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.2 of @angular/router." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ], "bom-ref": "urn:uuid:86425ed1-4f8c-5193-b69c-eedc010233f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.2 of @angular/router." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@18.2.14-tuxcare.2" } ] }