{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3dda6000-19be-5255-b744-61bfb59141f7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15", "type": "library", "name": "@angular/compiler", "version": "5.2.11-tuxcare.15", "purl": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:df96a922-9400-5a2f-8af4-20d2cf7ace86", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:55b2dd1e-6814-50ce-927b-e3960690422b", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:92405e50-9643-5f2e-a903-3834fa309124", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9e310f24-0a1a-52af-9b52-33c3ced0b4d3", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4b47484a-53da-5a7e-af60-66b79219b60c", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7c9f97d7-81dd-5583-88eb-dce0002aac8b", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a1504c59-b74a-5157-b96b-0ee351f7cee6", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9c025a08-ee9d-520f-b0f7-9ecc867e70c4", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:32a2dd3c-7e64-56f2-a23c-569f01730567", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c0b235fd-f0d3-5fc1-88ca-f2fdccca27d9", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:058b1504-bfe9-5bd4-a721-e82ddf627f49", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:d981771e-47c2-56fb-852f-58e3a7e93cd8", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:9a6e20d1-7347-501a-aa65-e9455836f8d0", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:10da9fd0-a891-56ed-bdf4-ab9cefda9e1d", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4e58739f-acaf-51a0-80cc-b7a76c2e1e7c", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5d3d3775-a085-5088-9735-96f50245a4f3", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:03ca9755-39ea-564a-b873-6dad4117d549", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2e4bd921-4aec-53a2-80cc-da5720fa7911", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:03085384-5bf7-5369-9c5b-7604fafe210d", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ba401272-529b-59ea-930f-39b012dbf49d", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7d948369-c2e3-56af-a1aa-71d201367bec", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ae9fb4c9-fdee-576b-9dcc-fbe5b476460d", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.15 of @angular/compiler. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5a7d2a35-b801-525e-b81b-5afd67bea6dc", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:c45dc9f7-a43d-5c2f-a539-ada29d63cc8d", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ca814def-6933-5b17-af29-98e0ec9f2f0d", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.15 of @angular/compiler. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ac9a3da2-c830-5319-a672-53df334b6fa9", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:42dbfa57-0453-5058-8af3-a8d4bafb32f5", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.15 of @angular/compiler. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:97f600e0-8680-5aca-8ea3-1249521e1fff", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.15 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.15" } ] }