{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7aa1f800-aa8c-535f-81fd-942503eab250", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16", "type": "library", "name": "@angular/platform-server", "version": "5.2.11-tuxcare.16", "purl": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e6ebc687-5115-5fcd-a171-0d34ec40b287", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:632e9675-35a4-5112-8a22-d684a347dffb", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:b46f5d2d-61ab-5727-8921-0ce4e406e5b7", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:95f80da1-0ccf-59a1-816f-cc46752c2ef4", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:71e0a63f-8dc7-5952-8aec-cf8cd7dbb381", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e2bf215c-7224-576a-8b09-3c4ac70a7944", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5034a259-fd11-554f-a772-28dde284d1f9", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:e81ca9fd-ee0e-5de9-960f-e20cb11ad34d", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ff6882ff-2bee-5b3f-aee1-25141388c86b", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3efd2da9-9e21-5de0-967a-ec5a22b167ab", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:2bd9871b-57ec-557b-98d0-b2ac6206954e", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:d921c535-e197-5435-8842-7dc2b2f5232a", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8da9dd9e-f74f-5998-855a-85c517acd6a5", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c47b8ff9-75cb-56d8-b76a-41fa0560ce48", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:a6406214-8ac6-5366-aaba-1dd4167bf8a6", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:8b7fead4-f7b6-5b3c-80c2-ea1c76a8f420", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:aa10c77c-2901-5e52-ab04-0c59589a723c", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:3e3beb75-9ebe-5702-b0ea-4e3892e2f76d", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:366330b4-1544-5a87-9483-f09605a5807f", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:841cf683-7ed1-5968-9086-5ca47c843a85", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:7efe0f4b-fe07-5689-b1b0-e87d2f9b217d", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:54195a23-a5ba-516c-a0e4-476855a0cf54", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.16 of @angular/platform-server. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:ff284db5-110f-55f9-a21d-6061df4b4adb", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:c4023bbf-dc8f-58ea-ace7-e016293f8ae0", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:71ed000f-ded4-5482-b26c-9488c0ccf304", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.16 of @angular/platform-server. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:5c9196af-27c5-50c1-bdc0-e8903aad0166", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:258caabf-d564-5368-ad2f-c08ba0337f2e", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.16 of @angular/platform-server. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }, { "bom-ref": "urn:uuid:9da96f56-bb8f-5fec-978b-b23b792594e6", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.16 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.16" } ] }