{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ac4a736c-db74-5545-94f3-f4dc6fc1b5b8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18", "type": "library", "name": "@angular/animations", "version": "5.2.11-tuxcare.18", "purl": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ae807346-ccdc-522a-a4a4-c0d064e0718a", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:15f1e684-564a-5c93-b386-ae98c0a50d81", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:292e1982-4833-5dd4-b991-01dd59d403b7", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c197d940-01a1-5cf7-a983-bbd0d01809fe", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e9862dfd-5540-51fe-9cc6-93f67f60c65d", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:23dacccc-0cc2-5e2e-aa28-f286b876af67", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:868dbf82-5142-51bf-b358-76686afcc5f6", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c6e405f8-3aa8-5a70-80c6-35a8d108e4e9", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e5fd9117-efb7-5041-aba9-e3d456ef8bee", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7720a612-8e06-5e78-8b64-c84bc9af9af0", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:8de86098-1a6c-5f9f-8f1c-6ad6e63703c4", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c6fc15f9-7915-5f64-800f-353014f33434", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:f8448d00-96c4-5fe5-bc32-7d0b83b44fae", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:573cc5a9-b4aa-51ba-aef3-8bfaf9763838", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e427a336-fb0d-5d92-8bc5-31dff7dd922e", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:2e52d108-b00f-5b5b-9e15-b72fa5a787ca", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:96b012e5-e96a-51eb-950a-327a2cd104c2", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:aeccfed4-ebaf-5c70-a29a-1cb94cf9f1b0", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:8720ef20-96ca-5a03-85b7-ca4d73295b16", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3549f18d-403a-51b5-83f9-e0cac50da199", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:769c2b2e-3d0d-5af9-8bb0-b7411cd830ce", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c6972386-784d-59c1-a979-7d5f6e361401", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.18 of @angular/animations. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c4c5f180-c2d7-559d-ae4b-6ab8495af5ae", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e25bad07-f432-5ae8-974d-9ff96ee29f6a", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:48833b53-ff9a-51da-8edf-4fa5fae2b19d", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.18 of @angular/animations. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3ee760dc-70b3-50a8-94eb-ead58b96844e", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:40fc3104-d1c0-5c71-bd4e-fc6ae7363c6f", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.18 of @angular/animations. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6277c1d0-1903-54d7-be55-3d54ca8b7b5a", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.18 of @angular/animations." }, "affects": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/animations@5.2.11-tuxcare.18" } ] }