{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ebb3c6dc-a049-556c-be87-163e46ab8d73", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15", "type": "library", "name": "@angular/platform-webworker-dynamic", "version": "5.2.11-tuxcare.15", "purl": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:9a6fff2b-7621-574b-aade-96265b756272", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a80fd8de-cbdb-586e-b87b-202eb64246fb", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:68ec5506-4404-5fe7-844a-16491b338975", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5b57c7e3-8030-588d-afef-c2f3be2f5983", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:82544702-d724-5b0b-a4f6-8e05ce6e185d", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:7736b1a7-869c-5c85-8e19-90c85e780675", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:a135fb07-722d-5c88-83ba-63808ebe2fa5", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0440106b-0729-5eff-a74c-a145661d71ba", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:0b606d62-3d3e-5ce4-9821-516e7dae1016", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:204223f0-7f4f-55fd-a591-68670b9015c9", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:4a25d399-0c29-553c-9e95-4aa7e6053e60", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:895d7855-d41d-5a8a-bf5f-ccb8712fc96a", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:24ef3177-2629-5dc8-b10f-3307b75e70c7", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:ba08e275-f805-5097-a8be-88b37ce70840", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5965ca49-8107-5378-9e0f-19daf265c2e2", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:872584e3-b4e9-5453-9634-5852101534e5", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:b17417c2-b7ec-5359-bd92-a515e0957705", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:e473e5ed-e5fb-5fa9-a4ae-8f2990424844", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bef1b6df-7cd4-5eb9-872f-cd7f3577e347", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:74325c98-7c80-5685-be71-42ca0fa70346", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:5177fa4e-8ec1-574b-9b79-cb96a14304e6", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:81d0addb-4671-516f-a155-ca5a1758aab1", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:65bfe576-9ae1-5a0d-9cd8-2be6b6d485f1", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:1b0dc519-ca09-5c74-8fd0-d42647a53b58", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:99d5b7f5-08fe-56c9-93c6-fb48c2fa60f1", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:bfff4471-8f59-50f2-8b99-4f26882cd5be", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:84093f49-772f-5ca2-a272-a27d9e3d78ce", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }, { "bom-ref": "urn:uuid:2f1f5d04-5ce4-50b4-84c2-f8b57ae00845", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.15 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.15" } ] }