{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f57f37cd-af15-5cfe-8eee-1ccecbe1d69d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14", "type": "library", "name": "@angular/http", "version": "5.2.11-tuxcare.14", "purl": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:443014e5-d78b-50ce-b06c-12811aa92773", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:18f3208c-7d83-5089-8b6e-d8bde8da4414", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f7e4f686-cc60-53c3-bd1e-f94081f8a5e7", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5700d9ba-2e7d-55ec-b210-1a0139f6e3ce", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c0d5c34f-41df-54f3-8b59-2af1c9170418", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b0b4a54e-cd0e-5edf-a618-0fd402238dfd", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4e60f4fe-1a51-5819-b6e0-83260d8d52fe", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f296d1a0-6efd-5c86-a194-8bca2665b8f9", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d641f613-1405-55c5-b609-f5007c14da67", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f803c8a7-8aa5-5657-ade6-a2644a147655", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:15633d57-3317-500f-bb14-534defc4a936", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b8e5279c-7b66-5e22-bf42-390656f8cd13", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0b776268-4bf5-5b17-a567-5c922be8b71c", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:fd3d789f-40a4-55a7-97eb-cd2edb9c0737", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6ad78607-cb84-554e-a05c-1077cdf6d95a", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8118cd7d-c8bd-5c49-ab7f-9aa5b76aa638", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:271034ab-761d-5656-9b08-672e0375dc8c", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:805e5f2e-a236-5b2d-9d96-c88c0b5ebb69", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:fca88e76-bf8a-5d63-9aaf-98e2dc6ff506", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8bcf69d6-bf07-59a9-abaa-0328a029109a", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c2fa3228-48f9-5f0e-9efa-01d3e94f0667", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c061dbee-5c3e-56d4-8f45-394b797a97cf", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.14 of @angular/http. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ea6bf76e-e966-5667-a239-3453b8a03557", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9d6df95a-7fff-5beb-b7d5-f282b4ed3b68", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:30e93fc1-59fd-5ab1-9834-7ddd31d6c67c", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.14 of @angular/http. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:142fc4bc-297c-580f-858a-f83b6b7742b8", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f98de11e-01f7-5734-8641-95b67df67242", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.14 of @angular/http. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:943c8d19-b7ed-5957-a92a-ddbcd5614bda", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.14 of @angular/http." }, "affects": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/http@5.2.11-tuxcare.14" } ] }