{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:327d9362-1b1f-55d4-97ea-b460c3073bbe", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/service-worker", "purl": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11", "type": "library", "bom-ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11", "version": "18.2.14-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:860530be-79bf-5e93-aa83-7f33f0c16f69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:c2573e16-5b42-571e-9c5f-1d545ea1c806", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:a73d5606-7a66-5ec1-952a-38f64e8e044f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:ae1967ad-23fa-5fa0-b44b-d1651f3ef212", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:3416c714-8a31-56b3-b1b7-0c79eefe21a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:e4948ba8-7582-5ebf-b8ff-cfe86cd49e8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:57ad60bc-59fa-5e8d-a609-5cd19c57d351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:95e2c37c-8127-5053-992f-2758640653b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:bcf4fc5e-2dfb-5fbe-8465-f02497511615", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:aeb3a382-5fd0-5f4b-94b5-bd0003b2e186", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:0dccf6a6-b060-5bed-bdf6-cd4dd26beba4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:2b403904-4504-5d87-bd90-e75a4f69e0cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:40841598-6f52-5def-87ac-19339533bdbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:ff9f2c5b-7727-53e2-82fe-21edc4696da3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:d21d78ef-2065-544e-a14f-f27fa0a08fc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:3c0639f0-7ff4-59b5-8666-dbc9d87acdf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.11 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:5102761d-7940-5425-af1b-8d6dd0c5313d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.11 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:dae5a065-d17b-5355-bcaf-5ebc0afc3d2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.11 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:c46d88dc-b1b5-5075-a7a5-50e8e97a3de8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.11 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:e3d4f5b7-652e-5945-ab91-ea9b8a7f23aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.11 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:d7ac27dd-dae9-5161-88b7-d4279e71f325", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.11 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:60962604-5d54-5dce-8f08-95ed5fde21d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.11 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:f7e4ff76-1842-5c28-8616-9d77882b201e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.11 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:5797b226-a181-5111-a738-b4f481a6d91c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.11 of @angular/service-worker. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:a254cc87-b1ef-55b8-bfc5-69ca595a5a41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:3ae9aa74-8a63-540b-8e30-f1e80182fcd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.11 of @angular/service-worker." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ], "bom-ref": "urn:uuid:a7fd1883-32ea-57cc-be03-acb88a77093c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.11 of @angular/service-worker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.11" } ] }