{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:41d758e0-2a18-5aff-8e44-e5922c541a47", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18", "type": "library", "name": "@angular/platform-browser", "version": "5.2.11-tuxcare.18", "purl": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e0c25139-d4e8-5709-8b43-b82369e50a16", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:17d81ff1-bd49-5f78-b6d9-1d70b983b958", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3388593c-c430-5a53-ba39-22d0f6fb4c5e", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:164922bc-548e-586a-bbc3-d7976eb0fc07", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:bb6fe886-e29e-53b8-bd85-591822c608b4", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7d9a3bf1-dc79-5aef-b5bc-ba562075fd4f", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:5f22877d-6ee6-58fe-9ac1-d81bd13eefd8", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:663f7bea-de5b-5021-8cbf-acf864102e1f", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:41e805e2-f6dc-546c-9931-5673c034c7bf", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e1946400-78f9-5ede-a567-9a6219e846f7", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:883b2360-4edb-5b9a-9474-3475084571f8", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b0453d74-6325-5878-a7cd-8ea44a228cff", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:fbaa4e22-d800-51c5-b190-299bfa69f733", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a4f7b475-6c16-56d5-a750-3673b718b9d2", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c61868ff-73ce-56f3-afac-ac7fe4e62a34", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:5b35dd86-9eaf-51fc-8374-1f30042e1f11", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:fc6fe015-4cea-5daf-ba8a-ba4690f82bb8", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3978d2b0-8c18-5f8c-8c33-81b8bb470df4", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a6d368df-b42b-5264-9b9d-58981d86922b", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:fa3cdc4e-fb43-53f4-8455-ae557253f430", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:79a5b76d-b825-5106-971f-69deadf7b6fd", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7890cf53-ace0-5aba-a7fe-88e9272d8e69", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.18 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:4fb80605-c283-5ad7-98d7-48723ac31abe", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6090945f-360d-5cf0-8c44-9a7dc3b7a15f", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b2d09147-9b28-5dda-8554-de7f54380cee", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.18 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:af355a15-1d39-5fb7-aa90-fe621dd2c44b", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:2ee5e217-7253-5dea-9cc0-e347d4a071a2", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.18 of @angular/platform-browser. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:ca6e330e-2b7c-59e2-a4a8-d93afeda1877", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.18 of @angular/platform-browser." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-browser@5.2.11-tuxcare.18" } ] }