{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b472bf7b-57e5-5ab6-94e4-c42efbdae25d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18", "type": "library", "name": "@angular/platform-server", "version": "5.2.11-tuxcare.18", "purl": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a1850bdb-04a0-5e2f-80f2-9e3f0ecbddf6", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3600bebd-b84c-58c2-9301-2b33d03ba6e8", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:ab19de4e-32ce-5385-87e0-d8b68d1c7af6", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:2922781b-3d3f-5ffa-a928-8f8423d12a0e", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:51af11cc-e32d-5ae7-96e9-4031489b8160", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:1033b7a6-9e3a-5d10-aa1c-9e064774f664", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:8c56cf44-cef4-5343-9253-234be9408ae5", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:9707efb2-8d14-553d-a068-bbea62ff3cfe", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6de85d9c-9b9e-50a7-b329-600b32987420", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:010774f3-e29d-59a4-b225-5af53a0e3401", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:676387d7-b92c-589d-a938-4df9c65c8d35", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6928a376-2ce4-5136-a450-8c6ddd41c566", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:50820e95-6881-5959-9f2c-a74db9e49918", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:1278e59a-0c1e-5b22-90f4-97b1e680948b", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:9ae2c00c-5313-5ceb-a6a3-f448799f6067", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:acf0c742-2d16-5f96-8974-b6701d0965bc", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:4b736eb4-ed91-5bd9-8f6c-6b7e9230ffb4", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:bba89476-b22d-5450-b302-6b80bf954350", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7ca2f888-235d-5786-a53a-e69648c91728", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:f3b76f10-dabc-5172-9df8-9e474cd37b93", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7edf3577-3823-5686-ad8b-961afa3ba332", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:92f189cb-fd98-5646-9a52-8c8ff2371b87", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.18 of @angular/platform-server. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:64389710-2d5e-5acc-a429-4b521a575e43", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:f3be3d52-7941-58ea-a5dc-7a7f1d24599b", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:51e6eb28-d1a3-593c-899e-51e60a62c3ba", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.18 of @angular/platform-server. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6bf0e2fd-40d0-51b8-83ae-d3ca57167b86", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b342ccc8-89e1-5fa1-8bad-d2a1c020d1b8", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.18 of @angular/platform-server. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:67e99aa1-d623-5d9e-a146-c01f3f87588c", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.18 of @angular/platform-server." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-server@5.2.11-tuxcare.18" } ] }