{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3b0d302b-d3b3-5b07-b782-e93d0b35aa47", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14", "type": "library", "name": "@angular/platform-browser-dynamic", "version": "5.2.11-tuxcare.14", "purl": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:fd169c4d-3019-592b-915b-5b0590c7036d", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5bef9391-66a7-56b5-bf4e-6dad8ee869d5", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0d7a3be8-ef2a-561f-a9ed-56a757c56c5d", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7b2ab935-530a-58c9-8b95-fdf133be0fff", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0583283e-9163-578e-b0c7-ca8308c3944a", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d574e1c2-1574-535a-ab35-02d68eaf7696", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:fa0bb29e-82f6-58d8-a194-6ec95b261581", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:876c1dd5-8f93-5bbc-8ed4-49b750c5c834", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:655fac20-873b-5f5b-be86-13efe349b04e", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:178e2c59-12a1-53b4-aa06-7f6ed9fe2769", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:01d2e514-b2d5-5d78-bbcc-187d8ebb1b38", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:db9a5bca-1c71-51fe-84e7-50adac168bf5", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:48d1eb07-529e-554c-a328-c085a97177f9", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:63adb8b5-b265-502b-95d1-3ac35a0e5e3c", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:055ed5ef-8bec-5a62-a786-bd936684278e", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:106861c3-e41a-563d-af7d-1f27e15b9522", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b3a473d1-4d2a-5b35-82a5-776c1a1fe303", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d56582d6-4163-515a-8a35-84365a689a3a", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:288a80bc-e546-569d-a17e-dc5cc8f161c8", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e0129c9b-f1b9-5bb4-b7ef-95066ad7371e", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0d4d7a0f-1c8a-595e-bcdb-42f43d3f405f", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f7f15bcb-83c8-50a9-b3c6-35431e9491cd", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2dabf76f-c2fd-5edc-8b04-44906cadaed9", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c19c9da1-896b-582e-bcf3-2166141af6ed", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b3f1ca14-236d-5a6e-ade0-f2431c8d246a", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:bb1e7db0-b047-5566-8dd2-003c955894c2", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b310b07d-8728-58dd-a0b5-5833bcdc8ead", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a86ad15b-bf73-5931-82e2-e583e6f9bc3c", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.14 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.14" } ] }