{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6b1852e3-e7f8-555d-aee5-e2498bfd724d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12", "type": "library", "name": "@angular/compiler-cli", "version": "16.2.12-tuxcare.12", "purl": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:90f82f20-2d9c-59aa-9b77-9d0a132d6b2e", "id": "CVE-2025-59052", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59052 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:12000549-72ed-5da5-ac55-6f95b724a474", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b7dc8a7b-add8-5d45-95ce-3bea4f43fff8", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:708d14c5-fec2-5f87-bf83-899caad914de", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:891cd7d3-16f0-589d-9530-e19d00183b48", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:225c35f2-1eb2-59c6-bbcc-38bb6858ff74", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0f4336a7-196c-5c0a-aa7d-93416bc68871", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8aac8f3a-47a8-5408-903a-7ec76544437d", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:a6ca1da9-e71b-502c-be68-feacf4ffc8ce", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2e62af2f-9f9d-5bbb-a6e7-88bda816963c", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:32abdd4d-16d7-5843-b657-5004334131e1", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:169a7902-9120-5828-9084-693160e4fb4d", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:73809f75-e71f-54d6-8b9d-339336e2f68a", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:18015ce2-a0b4-5eff-8a2c-67a4878c2503", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2dda54b6-e777-5fac-bd82-127abefa2966", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ce7c7115-240d-5a4c-a90c-2cab83e783da", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:a88a2bca-ca66-5e3b-ae12-85e216c6289b", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1ff78b58-a9c6-5b09-b8f6-74b5bb109741", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3cf80416-9c9d-54c5-afac-3749974d43ce", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:60e4b049-4531-5b0a-8952-5abf5887356a", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bf9da164-d169-5531-8b5c-ee2816d68554", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:513156df-e152-59f6-941d-7a582da49727", "id": "CVE-2026-68945", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d278ad1a-461a-5472-b5c7-23090047db2d", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0baec5b2-b363-53a3-b925-14c9aae170e6", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:eb0cf76f-960f-57eb-af51-3c86821b15cb", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 16.2.12-tuxcare.12 of @angular/compiler-cli. not_affected \u2014 CVE-2026-88056 affects Angular versions 20.3.x, 21.2.x, and 22.x where a refactored URL parsing utility added String.prototype.trim() that strips Unicode whitespace, enabling SSRF bypasses. The target (Angular 16.2.12-tuxcare.12) is based on Angular 16.2.x architecture, which predates the vulnerable code pattern entirely. TuxCare created url.ts fresh on June 24, 2026 for CVE-2026-50168, modelin..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4083b01a-db9a-54f4-963f-2638a133e4df", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c69af776-1c38-5d14-bfe5-6b67e7a9d77f", "id": "CVE-2026-88059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88059 affects version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:a4ec96f0-2e5d-5b9d-86a3-91dad6bc5479", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 16.2.12-tuxcare.12 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@16.2.12-tuxcare.12" } ] }