{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a8eeb506-38f1-5bd2-856e-9944ae4d5714", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15", "type": "library", "name": "@angular/animations", "version": "5.2.11-tuxcare.15", "purl": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:396f6d39-92cf-504e-a1b7-2a851dab1c57", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5b9b5843-439f-5bb6-9090-b7adf1db55d5", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:832da02f-bb39-5af3-8a7b-52e28d6c7e17", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7a6b8298-d322-5283-a2be-ff0a319d6cff", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:619d6a07-1ca2-51e4-90d4-b74e0ff87bbd", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8beb707c-8d3c-5da1-847f-3820ccc77bfa", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5ca7e636-8c10-55a2-9070-932e9876c371", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0c9c8e4b-2043-59e0-b995-b91771d64046", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d8497758-ce43-532f-9be0-41f16252c4eb", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c0b0632f-8199-5839-8ff3-abd0c1f67136", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:18dea002-395c-5a61-8602-0d7aea107ff6", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c4ad3c76-da7e-53d9-a29c-dcc0397253df", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:82a92b37-050c-5d04-9ed0-95a52649f2cf", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3fdd1893-8dc9-5f88-87b4-364c1e471909", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d1d50bc4-8ab8-533f-b00d-03ab7a15079d", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b6ed04b2-5332-5545-9975-8a59b43cd8f0", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:3c36ca46-b65c-55e7-8bbf-398561d91169", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:410cd8c0-cfa5-50f2-b628-5e8795c7f72a", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f79015e8-18e0-567f-93ac-1312dd4947ef", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e4ddba3d-e475-5eac-a48a-99b765284aa1", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6d154460-1e60-54dc-890a-76d31e61c636", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:cc32c5ee-5b00-57b8-95fe-728811a8548c", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.15 of @angular/animations. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c380098a-0a26-5494-a676-d28d39b7f726", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:f93abe5c-248d-5ae4-9b1b-9a7afa8911b6", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:856816b1-6a06-5ed9-a2d4-e6278cc61db4", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.15 of @angular/animations. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:fdfca31a-0269-5117-94ed-5ce83677cdd4", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:868b3c05-f08c-5937-80df-8d514f18a695", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.15 of @angular/animations. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8e02b51a-4c47-5b8e-a48d-ed636626f3fe", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.15 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.15" } ] }