{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8e2c0f26-2885-5b23-a870-cefeced129e9", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19", "type": "library", "name": "@angular/platform-browser-dynamic", "version": "5.2.11-tuxcare.19", "purl": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:540873bd-f45e-5b2e-b170-4ecd5bd6aff8", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:1e4b6361-2e72-5991-b29d-1cb5f7d581d2", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:bc0b971f-e8cb-537b-a0f9-6b0ba2d80504", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:c0653dc2-aee8-5643-98ce-4ce2cc1aa520", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2e42c316-7b6c-5512-b39f-035968ab1fd0", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:317927b3-8736-57bb-a0cc-7c4e6b8f6784", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2ea6bf2c-b624-5112-a801-829d8717a728", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:0c097935-3359-588f-a2c3-f8f561c80db6", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:dbf2226b-15e7-535d-9c58-dc02cc121768", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:1e39ccdc-6f92-5320-9862-7fde9c5eaed1", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:7b6319bf-b6fe-5af3-adfc-7e26b6999f28", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2a768e68-e135-566d-bc8e-e562ea4289bd", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:4b2cfd87-e8c0-5091-b377-3403f94d4282", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:283f39c2-0841-5324-b33f-dac266f4fdb6", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:607aeffe-9066-5607-9965-783ec45395b0", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:8567ed7b-d55d-5930-a683-354e832ab48f", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:114063a6-0021-5ded-a5dc-8a3962c6fff9", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:7461f5c7-e75d-565c-97e4-ef991b0b6202", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:d79576fb-954f-576e-b1fe-9711c5e1674a", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:873a3299-323a-5518-b3b4-4fcfafb88a5f", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:bae49ef4-e6d9-5949-a3c7-fde55e2f4a32", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e70bbc7d-90d8-5ae4-bdd4-038f8828cf0d", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:28571fc4-9f5c-58c9-b213-5c17283dd0ad", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:64de919f-05bd-54e4-b1d8-ca60f83fc0c1", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:be0bae83-ff41-5385-859a-4b430720b7a5", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:82e11741-04be-51c5-9a49-4b4aae09da60", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:664cb5da-e594-58a6-a4ed-1b4c806f00ca", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b1874360-c62e-574a-b4a6-a91016bac86d", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.19 of @angular/platform-browser-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser-dynamic@5.2.11-tuxcare.19" } ] }