{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7d26227b-bbbc-59fc-a279-4cc765d61fc3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17", "type": "library", "name": "@angular/platform-server", "version": "5.2.11-tuxcare.17", "purl": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1699f3d1-55e9-5734-bc87-be81371a3262", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:4de95fd0-9357-5c6c-a5d4-e1752e66147f", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d79c16eb-a11d-546e-a7d2-2a3dfa621613", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:7d0f4cc9-d291-5328-9d86-63284ddf7160", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:119effdb-8e7c-5830-b2e3-f60ee6a5e403", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:cdf4098f-3bbb-5910-9f2c-fdb4e859e47a", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:306fb4de-184c-51a2-a128-ea79ebb95ab6", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:eb473040-c054-5ce6-92c0-6b17a1d48be2", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:84964a8f-b63f-50f7-954d-6356132b2187", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:9fe3466f-8f58-5b02-922f-b87fa18e9d12", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:801add4a-ed0f-5a1d-8f18-5f0dc617b06f", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:13a7f10e-d126-596f-898d-d2aa87df8529", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:a8880805-3855-59a6-bdf7-e691359bc28c", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:acc7042c-9bfd-556c-9aa1-50ceda6be54e", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f88103f4-9a2b-5fcc-aa77-f799fb9062e0", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:8f833271-8ce9-53f8-87c0-57fc47b44910", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:1c3765e7-97a5-5f02-aa79-dcef5c6bfb30", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:bab6003a-9da7-5a82-af25-70214623e1c7", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:e2eba35b-a80c-5e9c-8961-e8f7809a1982", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:ddd546b6-34da-5c8e-b417-6f5c6f2d7e40", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:1c0b0787-a3bc-5487-bf64-5ac464960584", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:2359f939-4fdb-54db-80c2-251c69b26a41", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.17 of @angular/platform-server. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:baa225f2-e885-520c-92fc-d8cad972d2ef", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d5baf291-f45c-5d69-954f-e3be3d3c381b", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:e990d0fd-84e8-54b7-8a0b-c42021770c17", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.17 of @angular/platform-server. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0b940e1e-949b-5a89-8974-1216540b99ea", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:06f03fa8-f391-5372-9da7-ff0fadf75ade", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.17 of @angular/platform-server. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:89c4decb-555f-592a-8361-df4e3a840237", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.17 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.17" } ] }