{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b9c9e52e-17ca-5cf0-9d24-2e2b983aa1bb", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14", "type": "library", "name": "@angular/platform-browser", "version": "5.2.11-tuxcare.14", "purl": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:00ae1385-cd79-5a8f-b3ed-bdf9ef29ad6a", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f67b0587-9ae8-5bc6-be6c-3766e598c6de", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e780abc9-a74c-571d-945f-98400db9d6dc", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:562b81d0-3bb3-598a-9ddc-d7b2353b4ee5", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:13ed29bc-9353-5313-a6bc-ce124915a335", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:acb094e7-21e1-52d6-82ad-60382be678f2", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:cb8d1b3b-10f2-59a8-88e9-fdc9a55b801e", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7b8c2bce-a063-5115-b72d-ee1417e03560", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9e010d11-d7a4-5704-b419-6c33fd80ab88", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a6c34cd8-12cc-58cc-bf94-570ecf008fba", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1f7456fc-6c97-5387-8aae-49f51c31c19c", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4c7e33f8-9056-5c0c-910b-c8232f3ceed2", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:fab94a2b-ffab-5254-b6e1-466f5f6ee5c2", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5d0ed868-0856-5207-8aca-95b389ad90b3", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9cbc3fdc-6eea-5daa-ab93-4108d09a2de5", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5ca31be8-3b20-5cd4-aa30-f3df169be4b9", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ac5eb631-967f-56cd-8d28-5289319a3c1b", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8982a458-3bbf-5c3c-8e4a-4b53236c4151", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e1a41494-9bc3-560e-a246-89851ffd5093", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:844f01cf-657e-5e47-adab-79b0014335b1", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:58eb68c0-6e5a-5644-8006-54e6ffebbc11", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b437d8e0-c206-546e-a76c-3060b04885f1", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.14 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f19df538-bf14-5bb6-870e-fd37b42e46ce", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f5358960-f93e-506f-8ab5-0302e77fbeec", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:65cef537-0111-529a-a23b-3bb39ba2f2fb", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.14 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:231164bb-b98b-5fe8-8ee7-560343c6f2ce", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2f0c86e2-6b25-5a40-8fa7-dd6f3d9cfea1", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.14 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5539e95e-1d92-5f39-bfa2-f75b136cbe09", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.14 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.14" } ] }