{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3eb83f9d-45a5-5d0f-ad08-9ae30d42eda1", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16", "type": "library", "name": "@angular/bazel", "version": "5.2.11-tuxcare.16", "purl": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b276f984-0a44-58b5-a959-d48356e67b85", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3f04d40a-e4aa-501f-8e5b-8fdb74b87258", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:55ebcf3e-2693-5183-abe4-c092c11bc8b8", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:92ac2039-273c-5a08-a634-bd0ea171b492", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8bfc6e8e-7c74-5d4d-8303-d888b145d2e7", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:42d2b3fc-a99a-5cd2-984d-f292aa7be94b", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:969cb7c8-3a3b-5b5c-ad68-3c09b9d30800", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:82924c86-72de-51f5-937e-d271cfdce83a", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c05843b9-8384-5556-a64a-00b60c1d9c6f", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:76c4ee50-5c0e-5ee5-b009-efd5bec04d96", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6ba0f6d7-441b-5f4b-938b-b173ab9b4028", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c1ecbd20-543f-5c5c-98a0-81fc4d5978c8", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:913f023f-3981-5c0d-a700-937bfe5bcb92", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5fe1e3b3-d381-597d-96c9-5451ae431099", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1b2e0c90-3567-559d-ac02-ab0f55c18702", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9ed0b6ee-c68c-51e1-ab2b-48470827fa4e", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:07a59ac0-dc7e-548f-a97e-d91bcb83c718", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:11e34604-ea1e-54a6-a0d9-01914739f8e7", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0247ffd2-61c4-5149-8a5e-2c6e2c4a5182", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c74dc623-71a5-5e65-83b9-af1c1b5d1c26", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:916e8088-3f3d-5bd2-a821-606ee8275573", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bae5a1a3-7211-5ce7-80b1-69d2c9433f17", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.16 of @angular/bazel. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:de583853-c4b4-5427-b073-36e4167db4f7", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2173f2b4-913f-5ca2-80de-7d165798962f", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4023a5fe-db9f-5f73-a7e4-eae4c0a0fb13", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.16 of @angular/bazel. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:721782f4-c2a3-5379-8ab1-9af2b9fafd33", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0f3c7292-8f6a-5303-a98a-44e05d6ba3af", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.16 of @angular/bazel. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:349921d5-9149-5632-b1b3-070e4e11a50f", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.16 of @angular/bazel." }, "affects": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/bazel@5.2.11-tuxcare.16" } ] }