{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1bf2040b-6661-5e25-9651-fea1f9aa387c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19", "type": "library", "name": "@angular/platform-webworker-dynamic", "version": "5.2.11-tuxcare.19", "purl": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:54b8de0b-ad12-5ae7-a392-4efb075ebf14", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:7013e730-7646-5041-8b8b-0878a69537c0", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:40db3d73-0f0f-5296-b4ff-133bc9099913", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:281b8ff0-fe1a-5146-9438-b139f9137491", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e01f911f-49e8-5184-9500-e03c84a11381", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:86cd34d3-ec17-56d8-b1f7-60583ac42c83", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:6628f70e-8f62-5aa3-91e5-9e5ade4bd4d3", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e02a4de9-ea4c-57e8-b3c7-6dd6c4884626", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:1229be11-bdb9-531e-86b7-da20e9b10f30", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:fea8e98c-5545-56e9-95df-a85884b5421f", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:8f495702-eca7-5499-8447-cd548edf0193", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:113db1c0-057e-5e72-84a7-ff86e91f9fc1", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:a61f6fc3-8fda-5138-aee0-152319bba9ac", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:401ee138-8bbb-5bc8-97ad-64a53b8b485e", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:99c27f7b-8e80-59a5-a10b-531a74acc48b", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:5347e6b8-10d1-5699-8e9b-bd3108900eca", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:77365226-44ef-59fc-ae47-9c859d109801", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:84bdadf2-93f3-5223-a406-e17b08d5d6ac", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:32e081f4-fbb5-5399-8048-cf81c3f4321f", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:5621b5eb-ee8b-5779-bc8a-18df3dba62c0", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:6d9f994b-7ddb-5e93-aff1-afb404f868fe", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:13d5d1c9-083d-57c7-b515-23a4145746fd", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:5f32aac6-c2e9-5d5d-b8dd-3a713ff1ab06", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e6d250dc-97d2-5a2c-86f3-a53177d6c1ec", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:c2bb9ffd-8a84-5fc4-bf66-646bd50ba316", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:5995e8f3-6a95-52af-805b-4dd634b0d833", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:70356a93-2d23-5fbe-a557-92c5420aa2a9", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:735e825d-830b-549f-9923-d77dd5815cd9", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.19 of @angular/platform-webworker-dynamic." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-webworker-dynamic@5.2.11-tuxcare.19" } ] }