{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2984b694-0b72-514e-8202-9bf2b28a4b3d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/language-service", "purl": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5", "type": "library", "bom-ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5", "version": "7.2.0-tuxcare.5", "pedigree": { "ancestors": [ { "name": "@angular/language-service", "purl": "pkg:npm/%40angular/language-service@7.2.0", "type": "library", "version": "7.2.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:f00e4ec0-bb09-58bc-82c0-c887521c3657", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d3ba4dab-c7ff-5a5b-bfe0-d9a4d005beda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-41423", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:7dd99345-2cc0-5df3-95c2-73b0c464fe32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:c1f84567-4f7d-52ca-8b58-0e0568484309", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:2bba7086-6bcf-519c-8834-ce78a87926e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:aef7acbe-8123-5a2c-882a-4088abfeaae6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:ba156b22-5909-5bfd-8aa9-ed241b548a0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:6c354a4f-0e8c-59f9-b5ac-e645bc120394", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d4a9f87f-8915-56b0-8dad-c66901f0e4b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:de07ac70-d0e3-58ec-831b-3eb12fda95de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d0b9b9d4-aa91-5b27-a7f3-0e1243798b30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:d55abc0d-aa41-5687-88fd-c61ed148c500", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 7.2.0-tuxcare.5 of @angular/language-service. not_affected \u2014 Angular version 7.2.0 is not affected by CVE-2026-88056. The vulnerability requires the presence of a `parseUrl` function in `packages/platform-server/src/url.ts` that uses `String.prototype.trim()` to normalize URLs, which strips Unicode whitespace and can convert validated same-origin relative URLs into cross-origin protocol-relative URLs. Version 7.2.0 does not contain the `url.ts` file; it ...", "justification": "code_not_present" } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:e650b607-d528-5159-b224-a40a07d47d10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ], "bom-ref": "urn:uuid:92f3a3a6-8b17-5560-b5dc-5be820d005fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 7.2.0-tuxcare.5 of @angular/language-service." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/language-service@7.2.0-tuxcare.5" } ] }