{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:97b0adf9-b3df-5448-857b-77cef1bd7378", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17", "type": "library", "name": "@angular/platform-browser-dynamic", "version": "5.2.11-tuxcare.17", "purl": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c076ae91-adbd-5796-b4df-f5d82fd6e5d9", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d63ad400-a363-59f8-81bf-7ad4ea81962e", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:611f47fc-d8c4-571e-84bd-67956edbda2b", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:03c1b8c6-8d15-578f-b9cb-58baba839a27", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:98b3f528-a495-59b1-bb5b-fbb47a246f17", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:20b92c1e-0289-50c8-8e86-60e01d60349d", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:633160f8-e19e-59af-a981-76526842f590", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:9ba2fa2d-53e4-521f-bbb1-4fba1beeb699", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:8a05cba3-6401-57ae-a02d-4abc8083671d", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d061b2cf-6a4a-53ff-8163-4c2aa9ae8180", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:827561b5-79a3-5e04-a29b-de536b9f57d4", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:ab98159e-3b63-59d6-b007-5058d5a26640", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:1f0595fb-b349-58fa-ba0a-8d8786ef5e24", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b5dcc2af-d8cb-52f7-b62d-dc6e301b661d", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:aa283d4f-a67b-5423-b4b3-f409c620514f", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f70350d6-4725-5766-a3e9-1faf701a4ee4", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:dd9aaca6-c63b-5750-b7a1-16a09e3dfaeb", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:20589f47-6348-5392-b575-6ff0519e5dbc", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:c2169a6e-5b27-5c3d-bc90-5a692a62f689", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:98534981-811e-5999-be0f-60f1ef89728e", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:9475c068-0650-5d6f-8c5a-fdfed745931a", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:183247fe-0298-528b-bc04-2da315c664d8", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:69e5d49b-8984-522e-8cd4-4f245e60b1e8", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:63d628e7-dfad-5966-9683-392f78ae137e", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:89031f7e-7a40-5617-b159-5ee805c19222", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:42fe147d-2ded-521f-900d-864487da81b1", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:3c53e39f-7e75-54f6-a73d-db1e059b4cba", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d224f2fe-bced-53e2-bd9c-4dd54cbde61e", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.17 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.17" } ] }