{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:00ba718e-b9cc-5e5a-b09e-00b99407ce7a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15", "type": "library", "name": "@angular/common", "version": "5.2.11-tuxcare.15", "purl": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:0cb2b0c8-e994-5034-9f75-ad71312d9e9d", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:85339ab2-38cd-583a-a49d-070221960700", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2ae0f062-ad88-5698-9cbd-74d77d97340b", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:72a928ae-f957-5fc1-923e-9b6e7481347f", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:eec36d17-0da8-5781-8d04-b786c312e208", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:958b9987-ada9-5262-81c3-7278f0056a4b", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4fe52e7b-e667-5b7f-a7dd-9a21da6bdc10", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:806161ea-e229-5747-8339-20351136e349", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:560bdc8d-5d75-5b63-bfcd-7c967371143c", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:39d13fdd-db6a-50ab-ac76-ec1caa4a55c5", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:8900f770-052d-53eb-a48e-4cf46080cdbe", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2b8103a3-6add-5dd4-9e3f-084e2332d60d", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0f9a3960-c55b-5fa4-930a-cc7b34092300", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4c20e5ae-3ef4-52ea-bebe-06b3af86424b", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:621260fc-809c-547e-8fcb-5c43df7133e7", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5f3e3629-4671-5ed0-9b0a-5c58418283d3", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e55cc784-957e-5775-80aa-9f881a2cd66d", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c6a7caed-ed6b-5ce1-a017-c9ee78d8013b", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:af008df0-8ae1-5e86-b3b9-d2010e5cc47b", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a8bf793c-0cb5-5d07-99ec-7c5767e45f6b", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1fb56a0e-8121-58c5-abdf-6ebadfca1b4c", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:22c785ed-c975-5850-b9fa-91b56740b27d", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.15 of @angular/common. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:6ece2ecc-ec02-5051-9c53-f53221bfbffd", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b82e4b98-f8d4-5056-84f5-a6c497f21da4", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0649ec25-9145-5e3d-bc8f-b021cccaad5c", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.15 of @angular/common. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:19736490-6c74-5794-98e4-a939bdbec2d9", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:47858568-0668-5461-8b35-1fd47177f4a7", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.15 of @angular/common. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a077eb02-e247-5906-9a83-ed28376973bf", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.15 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.15" } ] }