{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:def144f9-734f-58e7-b6df-f20fe182bfba", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/service-worker", "purl": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10", "type": "library", "bom-ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10", "version": "18.2.14-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:ba286d17-89c7-5357-8f00-d24d2f2a84ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.10 of @angular/service-worker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:bccb1bae-810c-55d2-8aa3-1f97035ec0f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.10 of @angular/service-worker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:d0d551a9-2156-5811-9d46-45cb751fa261", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.10 of @angular/service-worker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:c3186bb9-a878-559a-87db-d2c004f7bd95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.10 of @angular/service-worker." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:b2e56d3a-68cd-5436-b5c4-7acb24925004", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.10 of @angular/service-worker." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:1083f565-f175-5bd7-9b65-3bb11202f4f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.10 of @angular/service-worker." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:0f69a4b4-88b8-5a82-ad76-eb3544485d5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:119f4434-a4c0-52a8-a69e-ef42a42e6d17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:94692586-83d2-5a0b-899a-76c6b161c5aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:911fb9f2-042f-5f9a-b5d3-b907c049fccb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:8e0dfe72-8f7e-5d1e-8ab4-a32eb1651179", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:c7a41b1d-15e1-5092-8cdd-672ec3e71859", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:9f869994-ed14-5fdc-b602-7fab3e1a9c13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:54e1278f-3ce9-552c-8254-c512648004b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:69fea780-cff6-5b24-9117-9fc94342e046", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:37ef0e55-9221-5e05-82e3-00cce1c077f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:51008c36-efd5-5c8e-829b-645e0dfca1e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:ebbaa394-c057-5e59-b1af-514888820b76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:5b85b2a5-d72b-5a53-b6ce-f45eb1b76e8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:9e99c937-3c89-5406-ba1a-c4959c61ca3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:eeb8c86b-7a75-5585-bf18-a208a127d42c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:1cabd6bc-8fc7-55f4-901c-cdacc998ca36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:e6f5a797-5f33-536d-999f-252a0773d885", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.10 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:919010da-aec4-5912-9642-b6521339a372", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.10 of @angular/service-worker. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:74d0777a-052c-5a09-924a-b1faaa783d7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.10 of @angular/service-worker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:05e04075-39b4-566f-946c-ff17902c50a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.10 of @angular/service-worker." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ], "bom-ref": "urn:uuid:f1e27d48-1bfc-5824-9636-1150add8ae70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.10 of @angular/service-worker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.10" } ] }