{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fb32f6d7-b8b9-5c60-a937-d06296d020ed", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11", "type": "library", "name": "@angular/elements", "version": "8.2.14-tuxcare.11", "purl": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c4e73cfc-62e6-507f-8beb-b1d07a91c5e2", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:702d63ee-8da6-5863-8deb-e5723dfc2e77", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1f3aaf13-f508-507d-ab7c-4d09338249c2", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b28db9b5-2183-5e3e-b2b8-efceb988fd4d", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:894c4ed5-1589-5ddf-9677-1676daa43f13", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cc43e720-5eef-52d7-915f-c1fb0d03d3cd", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1136c0f2-e0b6-55c9-9de4-61538ae194bc", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c449d8bc-68b6-5281-972a-ca2867db093b", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1886efaa-786e-5c5e-b5f2-6e7301881011", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e142d63d-3b6c-57b4-8dd6-e1074765124f", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6f5778eb-dffd-5341-968b-3490aa420306", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d287f00f-05d3-5189-a293-435bacfec814", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:42e4853c-edbf-59a3-b933-7057a9aea162", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3a308a21-e024-5034-b81f-1bcf1a2cc5e6", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:39ab6310-41a0-5898-a0e9-c96c668026e3", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cdccbf79-70c0-5af6-95fc-c2a917ac2426", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5270d30a-94b9-5dc9-8978-330f47b315de", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f2c8fb1d-5ff0-5191-a936-ea60b2cb7e61", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c34d1356-80b1-5ca2-b482-858f8b454e37", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e73820f8-b60b-5d68-9c91-5e0d895cf802", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:8df80e4e-4433-5de5-bfd2-d40a9d5d7747", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d15bc2a4-8f6f-5f63-92b9-e1a97e8bdef5", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 8.2.14-tuxcare.11 of @angular/elements. not_affected \u2014 Angular 8.2.14 is NOT affected by CVE-2026-68945. The vulnerability exists in HttpTransferCache, a feature that automatically caches HTTP requests during SSR for client hydration. HttpTransferCache was introduced in Angular v16+ and does not exist in version 8.2.14. This version has only a manual TransferState key-value store with no automatic HttpClient integration, and no HTTP caching mechani..." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:8bf7f96d-2f2a-5493-aa27-c3534b645dc3", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0182f605-4072-5ba2-a258-b26944625fa9", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d66bca95-54d3-5b48-aa21-bc10c704a0cf", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 8.2.14-tuxcare.11 of @angular/elements. not_affected \u2014 Angular 8.2.14 is NOT AFFECTED by CVE-2026-88056. The vulnerability requires a sophisticated URL resolution utility (`parseUrl` in `packages/platform-server/src/url.ts`) that calls `String.prototype.trim()` to strip Unicode whitespace, creating a discrepancy with WHATWG URL validation. This architecture was introduced in Angular v12+ (circa 2026 as TuxCare backports). Angular 8.2.14 (released N..." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:de50052c-1ce1-58db-8a1c-2216dcdccd04", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6b9656d0-e1bc-5012-a142-0426b170248b", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 8.2.14-tuxcare.11 of @angular/elements. not_affected \u2014 Angular v8.2.14 is not affected by CVE-2026-88059. The vulnerability requires HttpTransferCache, provideClientHydration(), and withRequestsMadeViaParent() \u2014 all features that do not exist in this version. These features were introduced in Angular v16 (per patches/CVE-2026-50170.patch and patches/CVE-2026-54266.patch). The target uses the legacy NgModule-based HttpClientModule without automatic ..." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:90b20cc3-4510-5528-8c5b-6f077e0d5b8a", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 8.2.14-tuxcare.11 of @angular/elements." }, "affects": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/elements@8.2.14-tuxcare.11" } ] }