{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e494850d-eb20-50de-89d8-14655b7d4ab7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14", "type": "library", "name": "@angular/common", "version": "5.2.11-tuxcare.14", "purl": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7455a262-0aa6-5731-bed2-01552412569f", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:70d9a71a-ac5b-5360-b627-d077250c5c30", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0e256d90-4368-5c0b-a4be-b99cd915e7ed", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:80c18683-3701-5c99-abfa-be75c5226699", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9e1b8821-5fcc-561c-a9f6-1e8db89b80dc", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:962a86bf-db11-5a83-a172-1334ffa8bae8", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:98edc623-eb51-5163-a7af-da8c50222596", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5b73594b-55aa-5d6e-8950-9ea9d434833a", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ce12a8de-2bd6-5064-b293-c296eac1387c", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f2dfe950-0353-5208-88ca-5c621d0723bc", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e1aa00db-faa7-50b2-935b-7422c16f7c28", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:52b0f4db-1a82-59d9-99ad-a60c5e18c1cf", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b85308a2-d67a-555c-97a2-405baabf7023", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e2ed2766-c8d1-58b1-bce1-6f4f586adee6", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6207c02f-828e-5144-be7b-308eeea559c2", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:81c361d4-5dd6-5fee-a0a3-d5edb9dc11d1", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:82a530d5-0baa-5e99-b56d-59bcc648b5a3", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:47ffa9c8-638a-54e2-9091-66011a9b2b4b", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3d44194e-9be9-5ea7-92eb-ef0f55d7ca2b", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:19ca77c7-0848-58ec-a4d4-e55c4938b578", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1501304d-51ba-52f6-8472-bcdbcb88e348", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:90a7f963-05c1-559f-9f5b-2c815175c93b", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.14 of @angular/common. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0b198a70-7b0f-5c54-9cfd-f19aebeff039", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0f24ed80-b091-56f3-9803-24ff7b30c289", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ab88ff60-f70b-5553-b321-98efe95af67c", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.14 of @angular/common. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:54385e81-3cca-53b4-a15c-20c277985949", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d926a7ae-6aeb-55ed-87a1-356b74750cf2", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.14 of @angular/common. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:bc019dd0-d07a-5236-9f82-097ae46bc03d", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.14 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.14" } ] }