{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:45ae01fb-ba67-5ca1-b422-39c63b9523a5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18", "type": "library", "name": "@angular/common", "version": "5.2.11-tuxcare.18", "purl": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f414b468-8c5e-554d-a2ce-48465ba59196", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:111a3af5-0768-5059-afe3-7ddc1571373d", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:315dcefe-6c77-5d5c-b799-f808c07619eb", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:25d3dbe5-ccc6-5cba-bad5-b344d6868eb5", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:539b84da-16ec-57da-94cb-8b78c04b2252", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:50014f75-be6b-5724-89ec-6bc9b0bc81b5", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:55f338c4-7435-5144-a95c-d1e15bb7f565", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:891a99c2-b7b6-50bc-8a9a-6171573fbb78", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:2c0cf4d3-e3cb-5366-8db4-efa703332525", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:8022a40b-e819-5295-9f60-8551b95d3af7", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7badc6ba-ba4b-5940-976f-2f9360173084", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6dc8686f-59c5-58d2-a966-b96ad375ace1", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:17b7672d-2d85-516f-9f77-c1631fe8c575", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:2d5bdbfb-baff-5c49-8764-680a5eeeaf8b", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:fd00c5ca-6ebc-5115-9511-c51f6827f31e", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c7b1f284-ffd7-5290-ab62-3bb78a335d6d", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:8157e41c-1f51-572a-a18e-0028d773c9ae", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:cebed058-d192-5f72-ab19-9d59540c5369", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:d6ade390-3074-5d0e-9ad9-3a14258028ea", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:5163f5f2-b56d-5ae1-b9b5-922533089b5d", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:485b0e93-efa7-5b7c-91c1-4837e280716a", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:33dd8eed-7f92-58ea-b98c-cff1ba1490de", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.18 of @angular/common. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:9ee494ed-a239-5c56-a066-6ae0e3c77f02", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:73d5da01-2073-52e4-a2a5-1eb4fe046f0a", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c9033117-e107-5bf5-8673-6fa2b0021a55", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.18 of @angular/common. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:94faed51-a530-5990-9099-3f9d66721f4c", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:fcc3c3f0-b4f3-5562-b7c3-a747b234a2df", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.18 of @angular/common. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:059bb4f4-e1a3-5832-aa26-8d142723dbda", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.18 of @angular/common." }, "affects": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/common@5.2.11-tuxcare.18" } ] }