{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e6ae726d-c460-5338-9cff-f04a8bca1597", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19", "type": "library", "name": "@angular/platform-webworker", "version": "5.2.11-tuxcare.19", "purl": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d5ce0f62-aead-52a7-afbf-7c0658b89fde", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:037733cd-9426-5442-acfc-e9eb322faef5", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:eb8631b0-a601-58bb-ad64-321f4be42092", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e9526a38-54db-5023-b33b-beb0f4475c54", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e6a39a64-9899-5cd6-96ae-5d00624a6272", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:18eefec6-3f90-5be5-81f9-1e4834abd512", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2d111ca8-16f8-5e37-a05f-8634c410356b", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:63c4b5b7-abad-5382-8919-658eca0edd03", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:c750a66a-74ec-5941-9f6d-9c18a2a0a530", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:570030c6-7250-560d-b612-045c1cc05c70", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2ffd749a-fb13-5632-b3e6-77cae2ae87af", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:18c0f2a3-d306-5595-9bff-39a6bc6f0032", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:5a1972ae-5be3-5c44-a9f8-383b7c54e736", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:7bf28ff2-9858-5dd3-b24f-ec027479080a", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:cf5dd921-c903-5419-a379-ac28fb00aba2", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:fc8d3508-5122-576c-9975-532032095424", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:0498d1a2-52aa-52fa-8b84-ea3dde634940", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:7bbdbbf5-3a91-52a5-b021-ca9184fc9b56", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:70455cc1-ede1-58b4-b055-badca5205995", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:f9ca4501-13c7-552a-9ce9-fc9a1708e5e3", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:dc5f5650-4ff9-5bb7-803e-015d9310a4dc", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:d00ab49e-857c-5031-9c9c-2b7ceb966b81", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.19 of @angular/platform-webworker. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:3e01523c-e073-5453-a530-e0142e2ca6ae", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:4f8f7ef1-0c4f-5b31-a078-edbe3f01a7e7", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:d0942c82-845f-5848-b143-a94ffd3bd00c", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.19 of @angular/platform-webworker. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2d7f0f6b-2a1d-5812-8bf9-47b370da52a5", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:6829054a-9840-5160-a5dc-e93e0661a161", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.19 of @angular/platform-webworker. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b52ae8ec-1169-5ca0-a952-fcf2a48d1271", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.19 of @angular/platform-webworker." }, "affects": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/platform-webworker@5.2.11-tuxcare.19" } ] }