{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1162a73f-42a4-57fe-a761-0439f7471ca1", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18", "type": "library", "name": "@angular/platform-webworker", "version": "5.2.11-tuxcare.18", "purl": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b4c4fb69-5b22-56cb-9ae7-edfcfbbc332d", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:52ff674e-c5e5-57d3-8919-ca47fd29c0f9", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7b46873d-8e38-50aa-9545-d4b80bfb52fa", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b461d980-f4d5-5e70-9033-2ce6d7caa6a3", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:82e74053-a71a-5172-a912-aee1cdbf3d58", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:03e23a25-9f50-587a-91fa-b8deebf14b8e", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:9b8eee56-bc1f-543d-b142-722fe35810b2", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7f7aa205-c8b1-5dd9-a6f6-ae2e71ce5b10", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:2e7160d1-3413-5ea7-b930-959377e36a71", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:386c1f00-229e-521b-be7a-092c77049ca1", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:df814d01-d01b-565f-a026-3b8109048997", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6a357c5d-1998-5a95-b621-c4f7cac51a3f", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:9bc177ce-c06f-5394-82d5-5f02ae0885e1", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:684588ee-863d-5cf2-83f3-c2b129a4140c", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:38263f4e-3b96-50b4-9f05-5c77ab9f79b8", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:db72b0d3-19fc-538b-95f5-817aa2a15093", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:2e1ce860-0c3b-51aa-922d-a4692ff73053", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6e595814-3fea-58d5-83b3-94b162ed4efc", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6546cf89-d2c5-5a4a-a05a-c031b35f9a1e", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b574bb3c-d676-570e-a0ba-099091bd7d7c", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:5491483e-90ac-567a-89be-728c70c6252a", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a6cf8d6c-9eca-5519-9515-4e924216caf2", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.18 of @angular/platform-webworker. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6467db7d-1dbd-5efa-b8fb-0a03ee45439a", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7067c370-7781-55de-9706-a241267e2586", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b61f8715-5c26-54ac-8cbc-cbf12a6a7e90", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.18 of @angular/platform-webworker. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:bf24a31d-cab5-58a0-a055-fc5df77ca8bd", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b0527c66-a38b-5b34-b54c-5a216b4bc7e4", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.18 of @angular/platform-webworker. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6394b154-795e-56fc-ba54-849772aa4c66", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.18 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.18" } ] }