{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cfbb6829-8ec5-582e-a857-6980df307e93", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16", "type": "library", "name": "@angular/common", "version": "5.2.11-tuxcare.16", "purl": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:220d9922-94c7-5587-b6fa-f4ededd21f9e", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:75029fd3-3707-5e24-b992-2e325072cc4c", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d81c4c63-0503-59fc-acd3-3f1298c7f611", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b3cd573c-3a1d-5025-89e0-6ef074455084", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:332bdc61-b0a9-5406-8c91-2ef01f96a010", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c8c2ddf3-fff6-5243-ac31-4f0e0f204352", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:62c5eec6-a199-5303-b65e-1662db242dd8", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e343ee8b-d63c-5842-adff-ba7e3807e349", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3a8098c8-e60e-51aa-80ae-220708037b65", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:39d3e3a4-0c11-5517-84ce-9780d871472c", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fa45e52e-e6c7-5067-86e6-3e9faf2869ef", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:61f86e65-ae46-5cf7-abca-f7c64d363332", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f0900b08-6127-5594-9b9b-9caa32d73bba", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bbe22a2e-6493-53af-b0dd-ebdd711e0f7f", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:465c0fd3-521a-55ab-865c-1615b3582dc3", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d0e467c2-a1bf-586f-a4bf-d298c5fbaaec", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9c7371e8-4dce-5347-b08f-aa1f1ba3642f", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d9c44a12-e708-536b-a6ca-9e5359421b84", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:32cf177f-6f3e-5028-bfb8-afed794826d0", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:43c25dcc-e539-5b1d-822a-8b38efc11eef", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:05666920-0127-5edd-bc4c-2176e4bdefb0", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c7c6e1f2-ae5e-5ffd-8ee7-110d9c3f49a0", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.16 of @angular/common. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:397999e9-677d-5056-bda6-5b4f1415b572", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:79636da7-37fb-56fc-846d-b3242ec3e045", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c9995111-27ce-53e8-9fa1-c092d8bcda41", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.16 of @angular/common. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:62803665-ba84-5c7d-b624-cb1a4f1c9af4", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:82c66f4b-5d62-5701-8da0-649fcf827f58", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.16 of @angular/common. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b2988148-b476-5131-93a2-c5fc6e90412c", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.16 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.16" } ] }