{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bf6bf857-1704-57a4-acb4-72b5deffce36", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14", "type": "library", "name": "@angular/router", "version": "5.2.11-tuxcare.14", "purl": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a83ea222-3498-509d-aefb-b916f64360cc", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ee96f20d-1fea-5cf9-adbd-ca20f6830792", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:734c734c-e539-546f-bc94-5a01b7ca908d", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f10e41be-282d-5b1a-9813-69957b53b787", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:cc8e9276-313e-5efa-bbd6-7244061ff802", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e9fb68de-238a-580b-a662-40923b22a864", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:de8e9348-e427-5a4e-8769-e1b6070d8694", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:31cebee9-2804-5ff4-a5d6-6c6435e5490a", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d460d817-1e5b-5ea6-9572-291ab6f5fbc2", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1d0cef27-6736-562c-855b-6a15ac5a5093", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c7643a27-0fc6-5338-86f8-a7df05231369", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:61da1fb9-f108-54f9-a65a-d140aa6a3eab", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:244ec12b-cd46-535e-aef2-8b6e8060b3de", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9a73fc18-cfe1-52f8-9e46-0a97bd029636", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a5e3533f-0fcb-538a-adc1-52e3249edf60", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:eaf03b9e-4f18-522d-b7b0-119616a5217f", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:77891f61-5f63-5d32-93df-3e519c8d9d15", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:309d3dd7-808f-519f-99ef-0099d8bbe718", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:75ccdd19-64f4-531e-a235-5c8538ed0054", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:cbf863ff-8a3b-5c19-9497-8f8f12bcaf3b", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3d6234f3-5301-5228-bdd5-6231e33f9915", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ac540188-f2a6-5f25-bf5c-72a317efc3bb", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.14 of @angular/router. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:129469e6-c2e5-5a9b-9996-273af224744c", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:50df6f62-56b3-5c1c-9237-fd0b8702e0cb", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a86b8c7c-8194-5db2-9594-150f45615c6b", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.14 of @angular/router. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2aa3e6fc-9445-5e8a-bfff-a8c2a90fdb85", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:dfe7f543-8190-52d8-87c8-598218b473fd", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.14 of @angular/router. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:dad1e8a9-71f1-55f1-ba7a-7ebbf8799fd5", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.14 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.14" } ] }