{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0a43239c-949b-5739-a47a-905bf4cca84d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17", "type": "library", "name": "@angular/compiler-cli", "version": "5.2.11-tuxcare.17", "purl": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1800c4ff-5c80-51ac-bb70-0c110667f507", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:049ef994-2d60-5b80-a868-741c9d4860f2", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:c5668019-bf4a-509a-877a-1b6566e3f639", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b060553e-8999-594f-b365-63ca6337671c", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:451e4e39-0d57-51a4-95b6-98870fc65e2a", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:4da69ff5-60d9-5b25-811a-2fe46ed4a77e", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b1ca1af3-9e4e-5599-8700-d0fdb1cf8599", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:9196d228-0480-5776-a3c8-c4d6e414240c", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:7460d45b-d3c3-5c24-bb77-e6f351b59e26", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:986f8cbd-0713-5d56-b28e-0f15263f9b75", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f83dc71d-32b1-574d-9518-ad413f035628", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b641634d-d5d3-5bc0-a6da-94d4a05424e7", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f1e1c690-bdd9-539f-85ed-c1c7996a3e04", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f3c9c5a0-0e24-5978-80e2-8e5b4571ee91", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:e5996463-8973-5372-9d0e-f4268480328b", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:1d14e0fc-4aca-50b1-9180-e5a68126f2af", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:51144317-a62e-59cd-9923-46fa64d3ef50", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:aedff7da-0cd1-5df1-bc8a-1388c33958f1", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:32f90696-1b15-5904-9dc6-492aed5bba86", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:88533700-599a-5e53-a920-595e945ffa9a", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:a2399138-6e14-529e-b52a-09c26a6dfc69", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:4bc5192d-dba9-5e13-84e2-9606742aea76", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.17 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:57f89d70-9748-57a8-ad2b-3a3ceb4aa439", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:446fb649-6ea6-5e43-828c-15d513a039e8", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d8843443-aa25-572b-a007-57745b4920bf", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.17 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b71be5a7-a210-516d-af0a-6d3988593b14", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:c4537481-d884-58b1-8b11-cf16a075f22a", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.17 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b7b0cb95-0c36-578a-b001-ec6eacb9dc12", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.17 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.17" } ] }