{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6f506208-945d-506e-aed1-e6ec62ea16b0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/service-worker", "purl": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4", "type": "library", "bom-ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4", "version": "18.2.14-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:5dcd270b-3707-5ed4-bc83-d28bff531f3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.4 of @angular/service-worker." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:b911c644-0b8c-585b-9127-07a006349b95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.4 of @angular/service-worker." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:22d31d3c-6346-555a-98c5-455e7978557a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.4 of @angular/service-worker." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:9768354a-ac2c-5967-82e1-369908fbb7f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27970 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.7." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:0568f975-134a-502b-9801-7c14c18c1040", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32635 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.5." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:3a445d2d-6a6b-53ea-9c83-288b7c930ce3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-46417 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.10." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:ae7821a0-9749-5e88-99b0-3555641b2f2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50168 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:0dba8cdb-824d-5029-9d46-ef86a573426f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50169 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:7f10350c-2e2d-5ad2-afa2-23b3fdbec259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50170 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:680b3035-7320-5c48-b9a4-05024fee18b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50171 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:c4019ca7-c6ad-5d2c-aac2-b257f17c714b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50184 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:8cd0b29e-a6fc-54e6-8351-31fbcacbeeb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50555 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:59a3f589-703e-52e1-a43a-5e20a76160a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50556 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:7688d128-8542-5619-a3fc-edec77da8ec1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50557 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:5041d745-9c7f-50ef-9084-f0907144e482", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-52725 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.11." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:7bcdc2bb-1d71-54ff-b37b-8778aee85f99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54264 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:68a0c7b4-5643-5690-a9ac-34c557462a0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54265 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:a32e9c37-c3d4-5e82-9766-fa36ed6da48f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54266 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:e79f7ce0-46b9-5dd5-935b-14582af7bd3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54267 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:ef227a6c-29a2-52f9-b17e-a75b22d70abf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54268 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.12." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:b40744ab-27c5-5e3e-95d1-0a2a60a2de59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68945 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:8c48fe58-2c98-59f1-9076-14333e836ac1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:3841e0ef-1555-53e2-87a6-ba50d03572ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 18.2.14-tuxcare.4 of @angular/service-worker, and is fixed in 18.2.14-tuxcare.13." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:8930f544-bdfa-592a-8c2a-37e1d93fc117", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.4 of @angular/service-worker. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:8151a8f3-fdb5-5401-941f-052d67d1dda6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 18.2.14-tuxcare.4 of @angular/service-worker." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:67759480-945a-528e-9ffc-989439797b1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 18.2.14-tuxcare.4 of @angular/service-worker." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ], "bom-ref": "urn:uuid:1484f0fa-5438-5c16-840c-3f8d27320a39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 18.2.14-tuxcare.4 of @angular/service-worker." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@18.2.14-tuxcare.4" } ] }