{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3216e31c-e33e-5736-90e9-cf2eee630b22", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18", "type": "library", "name": "@angular/compiler", "version": "5.2.11-tuxcare.18", "purl": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1348525a-e356-5e36-aaa7-a5130d6ab178", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b02db22c-cb0b-571e-ae3c-0086f6cd7dff", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:f9faf0be-8a1b-5f66-8098-fc50e486b2a9", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e79b024e-47de-5ff1-9b40-9dc49db4232a", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:5e8f0a11-45b5-5a95-a662-e0b6ba946dc7", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:35251322-982a-581c-94a1-a7711b9e12f7", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:df180764-5629-570b-84a8-d5a91993b3ec", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:f06a6ab2-df24-5241-ae66-1f36b80caaa2", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7a108f9f-d7d2-5f91-9639-dbf66999f171", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6839ba10-386d-5e52-9e4a-c19006bfd3a3", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b50fbe96-8813-5f3c-bd04-61092b4e3b4d", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e3db765f-c726-5f3d-aab7-e7d1ff8a9c08", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a38f09a2-8636-5387-8e88-e595c40eb72e", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:8a64ca38-b814-56aa-8ee1-94eff32a3fab", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7a820082-227c-5688-9e3c-5e4543f21e72", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3f2c295a-ec64-5fb5-9f60-9daeb0baf9e4", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:4900e3db-49e3-5994-9083-f9724ffeee12", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:49dbe66c-3f21-5355-aad1-f30a876974e3", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b4141d9d-753c-5368-a877-15a729530f8b", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6a5cbb9d-d03b-53d3-ad85-76cbd8915e65", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:ec660da5-26a8-53f5-9d12-8225ebf00b10", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3a909040-8387-507d-82e8-adcf8f99b2dc", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.18 of @angular/compiler. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:5f32b99b-df2d-58a6-a940-d9c4b418e4ad", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7c45ff80-59f0-5384-9791-d22d57337a89", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e15b6e9d-6f4f-529f-937d-81ddab838d1f", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.18 of @angular/compiler. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:daf3f8bd-591e-55d7-b03d-8543899d0630", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:792ab46d-bfb6-5b45-bab1-f9ef1aad6878", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.18 of @angular/compiler. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:848d1b70-1246-5e57-bba8-7443dca3fc02", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.18 of @angular/compiler." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler@5.2.11-tuxcare.18" } ] }