{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:123c5eb8-1335-5372-ad80-2a2a6605e0b3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16", "type": "library", "name": "@angular/animations", "version": "5.2.11-tuxcare.16", "purl": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:3f7376b2-8d40-53d9-9be7-b680659d7e1c", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:66d6434f-19d5-514f-8bcc-c99cebbcb69e", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4ee09610-8b83-58a3-9104-3df352171fb1", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:95067560-8906-5076-8876-f7b7d13ff328", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:85ad40ab-9143-5472-8f60-543696bd36ad", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a28d2381-6bf5-5ded-b4c6-84322f495843", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2bcc2852-4cde-523a-9c29-bff78b895146", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f62a8d82-d18f-5e15-9f88-619b04a1b939", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a6cc5b62-c109-53f9-8913-4617c84732c7", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1ba372bc-e23d-5827-8ff2-c363e08c280a", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9a236da4-a465-52d0-b16d-7c481cb3545f", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:cbb95d4d-7518-5778-8a28-24ad017b0510", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:aa77d232-37e8-5ed6-98d9-5cbe4603c2c4", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7b3eda79-03db-5f10-9264-8d4653fcab55", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f155e32f-d1b4-5017-b27e-303de06c6d3a", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3af4757f-5656-5145-a3e6-2346f0ccb404", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6e7712e9-1c82-5812-b3c6-4298f2da1099", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fd927276-9d50-5ffa-aa9d-b44884fe9e7c", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f8c6a05e-37c0-5b62-a456-6c5efad9ed3d", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:82cb8d10-2697-5cd1-b715-706c101332f6", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3406c5a1-9ed7-5c32-8d5c-df52c7feaa24", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ca596dbd-6449-59cb-96cf-26e530d23a85", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.16 of @angular/animations. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:cdc9f2c7-7b1e-5355-a700-eeb0345cd86e", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5542eae9-33b8-5355-868a-6d44206dcfb1", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:434d60e6-0e2f-5da8-afb5-5744e816dff4", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.16 of @angular/animations. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7b289fe6-ff90-546a-b5ea-4b7f33b515f6", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:65f1b837-de30-583f-b404-934eadc3895c", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.16 of @angular/animations. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:820b6b3d-18e8-5d11-ba07-2b81eef73384", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.16 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.16" } ] }