{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9323ca1b-bad8-552c-ad83-d21d329f1af0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17", "type": "library", "name": "@angular/router", "version": "5.2.11-tuxcare.17", "purl": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:9681a22a-58d2-513f-87db-a351c0575b98", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:2a15b542-6361-5ec6-bbb7-6606c1d576b6", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:8d5f5ab6-aa62-5db7-acaa-2a712f78b6ce", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:6655a6fb-2a57-5dd6-96b6-0a7919afaac7", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0ac70a8f-d64b-52e7-8d73-25aa9cbf088f", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:35d15ea5-cc41-5f86-b3d8-a8190a150931", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f08214a6-383b-5020-a79f-075745d55f1d", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:5b47c0df-f0b9-5ed8-843c-fcf858d6c5a2", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:d2c2eed3-8d4e-5ca6-ab89-91a43128f5d0", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:70e5a6c6-48f1-5a1d-bbb4-7acf9005352b", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:b49bfbb0-0a08-52e5-a1d2-fb55249b234c", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:c5cf0acb-12af-5b28-88b1-86af053e77d6", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:f6a46fa7-e67f-5844-b668-01cf5d866861", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:c8c59d5d-e080-5e5b-b511-bea2a1e10de1", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:5042f9af-3f3e-5ca8-b26d-49b01dc9f461", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:2552b87b-82e0-56d6-8267-ea60262fdbc1", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:4b4482af-49ba-523e-b5fb-2b1a4d918f82", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:5fa151d5-9a97-5bab-97da-747a2938b907", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:7a0ae87b-f23f-5e62-94ab-361c14f1d467", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:832f0f22-fdb1-5c03-a061-f2b06abf1393", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:0f45e898-eff2-5dc0-a10e-7260f854b1f6", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:08a07b48-a1ea-546b-a8e8-446667e35d26", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.17 of @angular/router. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:371edbb5-ad46-5eac-b944-21efa09ccbac", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:81642f0b-7a6d-5d87-aeff-7bed8cff54f4", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:79950c54-d6bf-536b-8359-c7a710ef4b9b", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.17 of @angular/router. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:2b388e6b-1df2-5911-a99d-806e34f0ffd1", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:edf26649-309f-5d5a-8c0f-0ed7c426dce5", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.17 of @angular/router. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }, { "bom-ref": "urn:uuid:07d09895-68cd-5dd3-a637-6d303aafefbd", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.17 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.17" } ] }