{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b9521efc-e2da-52a9-85ab-1a00f5312e4a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16", "type": "library", "name": "@angular/platform-browser", "version": "5.2.11-tuxcare.16", "purl": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6ebce599-097f-5c34-9ec2-dc74d59e5ada", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:db213a20-0c75-54a8-8578-2156f238c4e0", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ee921166-da2a-5ba2-b30e-107f95ec9805", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:056f16cf-df94-51ad-895f-5bd7d0c1bfe3", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c99e6df4-cb31-52f0-b3bf-044ce0698eab", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:6e217028-b40e-5bb4-a2ca-9bb65d5e25e3", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:60b60964-e8a3-57c7-a58a-83bce97c3cf4", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8aa24e02-44f5-5a9b-975d-61aeec3e601c", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9c761be5-68d0-57e7-9ab3-5d6bf9eb284b", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a1bcf107-3322-53ef-9419-4c08d6cb35c4", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:183117c6-088d-570e-a2bc-54793682c162", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3ea72404-063a-5834-bde8-5ba89584f3e4", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b8542565-25ee-507f-a012-2ff4825f62ae", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:faaa8a6d-2547-5552-9e26-cd37a319fae5", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b68ea474-7a63-5458-98fe-9d0d8a7ed1ce", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5d0e72db-039f-5321-a46a-9c6e7987f16f", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:272dfeb4-bf9e-520e-a11a-8f9f472504b8", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e8728d53-2c93-5241-bdc2-d5d3d8a63bc0", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:60dcbdc0-fad9-5eb4-aa2f-efcd29044349", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:f68b92ed-f940-5f35-9752-6a7fbdcb541f", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5e2af4e3-b165-5859-bab0-a7dde72073cd", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9b91478d-92a6-5d26-9753-ec4dabf9b69e", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.16 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b5b8e74a-0d1d-5dcd-9a2c-fc2363b541ac", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:1c8d36a3-33e6-5b12-8bd7-ab87ccef26eb", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a674798b-6376-571d-a027-3a99c88590ec", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.16 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d6c81e59-bef2-551a-9ea3-9907de0d23e5", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b198d2fb-558c-59ce-94e8-97ada0874a9d", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.16 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:cf1b2574-6a29-515e-860d-fd8e68803616", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.16 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.16" } ] }