{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8770b133-8975-5a7d-a0b9-6f67eaacca79", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16", "type": "library", "name": "@angular/compiler-cli", "version": "5.2.11-tuxcare.16", "purl": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:588be534-e2e3-5055-b37d-16faacf3aa52", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:62fc32ce-ed15-5fee-929c-03ad90946a2c", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:048cf100-f63f-51b7-aef5-1edd5eeabff1", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a09df533-0fcc-5996-b2f2-19f75adea823", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:96576502-3743-5931-a664-c24345c304ec", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:79c770cb-1ee1-58e1-95c1-cda80647f11a", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6ef34b2a-8308-5f2c-90ae-18f73fef6b2f", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b20e51f9-6042-561d-8a0a-1bcbc70f98fb", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0512eba2-a034-51d5-b3a1-a7ed25375ddc", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6b77334b-7048-58f0-9556-887f498b935c", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3945f91d-08bf-51d0-8bae-4184c4aefd86", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:43562c9a-3117-55be-88a2-85ac21906412", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d6b02641-61f5-544f-a0d8-8d0a91540e24", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9b37363f-21a3-59c5-99bf-24f34f75c7dc", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f314f59a-09ac-598a-b582-1a4552d65096", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f4008507-88ab-5b4e-b429-29e92b2f63ce", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:72d1a540-26ef-5d61-a65c-a75d58c949b0", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fb25e48b-006e-557d-a0dd-1c87ce3ad31e", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d97bb17d-73b1-5db1-96af-0088069f32f0", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:dfa0363a-7a85-541a-b1e8-cc92e551d6b3", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3fe8632e-8df7-5bb0-a352-5bdc3ccea7c0", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7877d9e4-3904-5ee4-bb1d-f34b22494043", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.16 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b2b97734-9186-5198-98c3-3ce207423ab8", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e7da73b1-5de7-5924-82da-09bfaaa1d3bd", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:847f7921-b40f-5784-b4b4-058b27bdf2be", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.16 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6d9440d8-2131-5423-8802-f96030d1658c", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:60a96e28-5efe-5e8a-b575-b37e79391b97", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.16 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5419d952-7065-5c9c-828e-0681b9db8c10", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.16 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.16" } ] }