{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2db87289-467a-5fe0-a1e2-9fd66fb402a3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16", "type": "library", "name": "@angular/compiler", "version": "5.2.11-tuxcare.16", "purl": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5f12ec7a-4dc2-512a-b9c5-3721c8e17a10", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9b4efffc-5355-540f-bf40-1f3dc1ed354c", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2a288297-bb35-55ef-9b95-ebd12ab8fb0a", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:041ad2b9-103a-5951-b5e0-6b24a46e598e", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b2d70de1-391b-5c96-b563-36383bb67181", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:fa3d3b2b-2082-58eb-8c7f-310dc1be9941", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:87731145-49f3-5740-85d5-094bba1ec0d2", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:98044c56-38cd-5802-abbb-3f170535d424", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:404d8f13-26b4-5483-9942-8ebcbe324d2e", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:4343d24c-6788-5670-85ff-a571f1dfba44", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1f612f09-c41a-57f3-8202-9bc30c40ca9a", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:eb7f4091-2273-56d7-8a76-59a5af7197e2", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:0d83c35f-0acf-5d34-bd18-9f442a1950d0", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7c9404ac-df1b-5211-bdf1-b2f6fe3617e5", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:02f3cff7-5cef-5764-ac96-b91b94947834", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a34faf29-89e2-5d77-9f00-b1afbc111eb4", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1ff70da9-6cd5-5ccd-96ea-f335e5209fe5", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e63500da-0138-5d86-bfa8-6e92c976fa25", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b8f7b412-94c9-51cb-b19c-bc3636d7f341", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c5eee7f6-5a3a-5274-a0f6-18e2ffc82ff6", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:951a3f28-79f1-5fc2-8cb9-fbb967df2639", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:bb965ca6-221c-5ad0-99c1-79c08423df96", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.16 of @angular/compiler. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:db5f3602-782d-58de-9624-a526b28998d9", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3e309623-4bbd-508f-9850-ce13d175e85f", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:31680c49-e65e-54c7-bb21-fa22998f68f8", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.16 of @angular/compiler. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:206f5c1f-839d-5fc9-838e-83d1e2b3e5f8", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f60fa2e7-8be1-53c9-a149-a0940cb79267", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.16 of @angular/compiler. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3412eefb-f3f0-5398-8e49-893a74e374f8", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.16 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.16" } ] }