{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:26c4f43e-f1db-5b8f-b503-0c0b1289797f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18", "type": "library", "name": "@angular/router", "version": "5.2.11-tuxcare.18", "purl": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:14247d93-37b6-52e5-a45f-cd678ad12748", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b8217850-ed90-5421-9112-7c6ef9b97048", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a72d0b6d-2dc5-5237-a4b9-cdf1b3ca5421", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:d7381425-41e7-5909-a309-7e027073d7db", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:cc99d404-1bfc-5ba8-89d8-5195351949bc", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:01c6b0a2-3412-59e5-ad38-a976cd514cec", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:520ecaef-1367-5329-9c7e-8d3146345bd5", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:52a2d2f4-d615-57da-a0ae-765641a539a1", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:78f66a81-effe-59db-a5a8-c4fb3b09a8ba", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:eda30723-744e-5a73-8ea7-8694308063a0", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:4e7927ba-7207-5a17-81c5-6fe4e259253b", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:9a5e514f-58c1-5b9f-a2f1-ac43833946db", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:63b73438-262a-58e5-acc3-25bc8c8a8ad2", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:0ea4ab91-692c-5543-8567-6fc5aaa0f62d", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:06f0107a-0571-55ce-acf6-d7702ad3cace", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a1afed6d-8af4-5782-9847-2e5e045e01bc", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c5863818-7a8d-50c2-b8ac-29d6e831082e", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:16d01891-ac9f-50b4-b70d-4628dd8a4730", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:cd5c76ee-7561-5b93-a887-6b09a73aa5ea", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6e5a6cc8-84cf-5b68-b6d1-096c30b90758", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:8ef56a2e-c01e-564e-b90a-b54694742196", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:33767055-e816-5617-90c5-7caa2702af14", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.18 of @angular/router. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e59f1c31-2813-5cbe-b6ce-b0a0f15b661a", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:f07f7336-b0e0-536a-bc5f-4db3c39a2cd5", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:91ba054f-9c83-5fad-8ce4-9af29ef7390d", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.18 of @angular/router. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:efd517f1-4282-5ae7-804e-addb995dd74d", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c82ea4a6-d279-58cb-87ef-3e762104d2af", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.18 of @angular/router. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3c53b41e-6294-556b-a3b1-da6f09aa521e", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.18 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.18" } ] }