{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:33bd5480-cae8-5317-88bd-e7985efb0798", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14", "type": "library", "name": "@angular/compiler-cli", "version": "5.2.11-tuxcare.14", "purl": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:88bb17a6-0eb6-532b-a3fe-b0cb375a97d8", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ef518ae9-663c-5f3c-b943-0b409a74ec1c", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1320be0f-781e-5c5c-9d01-de8c728cc5f5", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:afb9533d-637c-53b5-9f81-3523edc3ff9e", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:79e6660a-f75b-5e79-b0b0-3d668f951048", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ad9cf768-087b-5174-b344-72c0fc603e0d", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7f95b803-5d5c-5299-90f9-0ae86007dadd", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:59ab0afa-350f-5b1e-a891-062a507dac28", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ba292d90-f061-51d4-9236-faf794bb92af", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:15d42dbf-7257-544a-9b06-1b4eab62b63d", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ca1331dd-2fc5-5bc7-b49c-61056a392e49", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:952890c0-b5d2-5e08-b73e-3d5874823b3d", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2ec30f17-bd39-5ccf-94ae-edd2d50f36fc", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:63ed917f-ab9e-5890-96b9-e0fc592d0f5c", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:128a5923-6794-5b60-a39f-427a69dd4598", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:03f220b1-d877-54e5-a099-46ecedaba41f", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6a132901-c519-5a02-8eec-c1edcc43fe31", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:26d98089-c835-529f-82c8-cc012b651d48", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:660927f2-f4ad-5773-a548-e1d0ca81aa75", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5cf5e898-e6c5-59c2-94ca-4b5d59ca873c", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e207d96a-42fe-57dd-bb0e-808559809961", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d21e1a72-b50f-5b7d-8743-85605fad3be5", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.14 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c7ed28ed-9abd-5dde-b47a-dfb6b07edf3e", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:bc353564-041a-57df-a16d-33df01d865d6", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4851d691-fb21-5eb6-bfc0-09233a7eea98", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.14 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:925c398d-024d-56cc-b6ca-0f7a2d13576f", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0dd9d044-b1c9-5ae6-a86e-00c253d2d3be", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.14 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c4159f93-c4ab-5deb-a13b-4b3a217a4fc8", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.14 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.14" } ] }