{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8ef537a5-4748-54a4-a4dd-abc435064e3f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17", "type": "library", "name": "@angular/platform-browser", "version": "5.2.11-tuxcare.17", "purl": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1aff7e82-5763-58b7-85ae-36d85cdbbe62", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:eb7acbb4-55f1-5bd5-9d8f-faeba362b023", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:134bc918-19e3-5c6f-8046-131a89814b48", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:5634f3f5-47ce-5ef7-8bf7-8984707778e3", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:6362901c-2585-51c5-90f6-fcf7d6baaa0b", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f3821413-0c73-5203-9937-b634e4590c7c", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:806543f3-507c-5357-b4a0-f30bcd36c543", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:fc95b0d8-a503-5978-891a-8fc992f0b02c", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:02272dae-bf79-5a39-b218-3d1a2d2b1980", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d1ad019b-4b72-552e-924a-15213d80cb20", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d76baf3f-b71c-58ce-a743-4ca702decc9a", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:9ec9d4cc-7ee6-5428-b0b2-2b2f046dab99", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:7ac52e8d-b9eb-59dd-909f-002bc3ff84b7", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:db5278eb-fb9f-51d9-905b-b88d7cd6ddcf", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:a0fbec6b-678b-5c68-9cd7-fba00bdc8f7c", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0878a16d-632a-5434-81db-1b428fc97507", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:ca534b8a-f964-54dd-ad91-51a8fe632b1a", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:e71c241f-6e81-5360-abf3-c0ca30659195", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:642456d2-12e0-5bfc-b595-73b347d00ede", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:74371326-0845-54e4-871d-2528a7ee2e6a", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:ac8ffb76-f538-5ca7-9d89-02745276faf7", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:e2956b69-c941-5f91-8fc2-ed50477b6819", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.17 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:536c9420-370c-5cf4-b48f-03495f450a27", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:e1a84ede-7f42-57a4-b01d-4f8185a9ef50", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0bd7a9b7-7a40-58b8-8e00-e66401b1c303", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.17 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:3dfb0b72-f3fe-54b9-8795-e00d558c283f", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:c57d49b7-340f-53e0-a020-1a9be8d6e80d", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.17 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:53837642-8d11-5dea-bfeb-69969cc60b44", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.17 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.17" } ] }