{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b93a254b-73ff-5299-b9bb-4bd20daac30a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17", "type": "library", "name": "@angular/platform-webworker", "version": "5.2.11-tuxcare.17", "purl": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:3d79fa43-1581-5a74-8a7a-a8ff0d59c6b9", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:62399005-ceb1-5d5b-b48b-fc44ac9527e2", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b5ce232e-8497-5870-bf14-cacf06ab18bc", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:98b3f7f5-b5de-5027-bca5-d1e361339c62", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:5f450fb5-16ce-5b88-a99b-e6b93057ab0d", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:40baece6-0f34-5628-ac12-10a02247ceb7", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:975fb769-f24f-57fb-b7ea-54c5ecf3f745", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:dc02e7f1-c237-597a-9128-2796db257a31", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:6a88830b-e193-5ff0-a7e9-70a24a4ad903", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d2b58b1d-73e4-57aa-a395-765bbc80b920", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:af732f1d-4860-50c5-9988-a35f6890d0f4", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:548a8f0e-842d-55c3-9ebb-5f98597ea3cb", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:4f81c2a9-1831-57b5-a2f9-64ac68fd3e04", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:5b263690-2782-5e48-ab40-ca62328c4fd6", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b08ea453-19f8-59c3-8885-8fe081306594", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:7f40a23e-c8c0-5492-9e7a-58e87ab30c69", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0e52e88d-6aae-5e9b-ae0a-a267db92d532", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:29b758d3-6d5c-5f7b-ae76-d1dcd747e51f", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:841b4ff8-0db3-5055-a084-95e9e1ef45d3", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:4decde65-d476-5003-ba05-72470224eda5", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:3d36daf6-883d-5fed-b4d7-838999a134ca", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:5ca8e193-ff5a-59a6-bcc1-4cf5d946916b", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.17 of @angular/platform-webworker. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:15899b2a-d755-5374-8745-3687c40c9398", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:99fe3006-9ce9-5d99-8a31-33949be788b6", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:ab8da4d9-0a30-5dca-9982-6e85a53f94df", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.17 of @angular/platform-webworker. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:e416ee36-cb9d-5cb6-9cce-87f7ef04de09", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:2c2c2952-fcd2-58b9-93ce-ec041ec20d87", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.17 of @angular/platform-webworker. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:7dbca847-6e06-5083-9fc1-762daf9498e4", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.17 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.17" } ] }