{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:46a0681a-9f9b-5b4b-9812-1f8a22da2759", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19", "type": "library", "name": "@angular/compiler-cli", "version": "5.2.11-tuxcare.19", "purl": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:4407dbf2-5c6f-508b-8cbc-4eeeaa757c61", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:5ded161e-6420-51d5-b9d6-7139e7394481", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:40f6a722-52d2-5c5a-96ed-46d9bf609123", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:1f5e8bd6-e350-5d3b-9ea5-04094f926a9e", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:4837792e-269a-5a00-ae1a-54fcf96e0f7e", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:503344c8-01d6-5b41-891d-d39359dbde6f", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:34f011b2-c3e3-5444-b989-d28882ec4a03", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:f65b1f44-741f-5263-9d4f-0fda7f9246e4", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:f05bd205-cbd5-5cda-9238-f3b730de01ff", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e0126788-6434-54ca-9707-7ef965329d6b", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:6952ea09-85f9-5349-bbe3-ebaf66a808ae", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e77ab934-ee7f-571b-8f70-06d095c8c193", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:29387b36-2b72-507a-96f0-bbffa7a894a7", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:8e96c4ae-4041-5a8c-ae95-7cfcf0ade674", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:58130499-ed64-52ae-a738-882bda3f0026", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:dfb853ea-8da7-525f-84ba-e5799075a62c", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:a4e513df-32d8-552e-a83d-d8b5744bdf01", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:293efe92-7d5c-55af-8895-8f3e18745d2f", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:455df5cb-5cb4-5dce-a65c-a5d06dad6e94", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b681deff-fb76-5646-8494-49be3933339d", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:9ad89397-129b-5100-bd7f-38ce5536af28", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:9feeeabc-0b0f-549e-9237-eea74c09e4ca", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.19 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:27f4390f-42d1-53a1-8d1e-766563223b90", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:05d230cc-d473-570e-92d3-261cd3878ee4", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:8ce2d471-d1df-5d90-825e-99dc561950b5", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.19 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:dbf672db-6616-55a8-8593-01bbf21a2753", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:84809f99-2027-5d71-b2e2-51895d739bb3", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.19 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:27f63e6d-a1b6-51be-b9dd-dcbe881ad4ea", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.19 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.19" } ] }