{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d28bdc26-cffe-5e7b-bc43-4a7ef8d38d54", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19", "type": "library", "name": "@angular/router", "version": "5.2.11-tuxcare.19", "purl": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:538608a9-ed5d-5253-9cdf-5e5c3907b011", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:0f26b609-dcd5-59cc-93f1-df1f375ffcff", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:1ba839ee-3db0-57b9-b8a1-c101c213f7d7", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:aa2b5e40-cdcc-5f09-b5ce-167ae768adca", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:04fa3597-553a-5a7d-a5cd-ae6d7fd1f953", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2abc59a2-fe69-5dc3-87b5-6a7efd804baa", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:4d8c0154-a99e-5509-a168-fc735ab12e47", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:c483c405-382a-5e0a-b8a1-a0e120642258", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:8db02930-5992-58a3-8f87-29e59b3bd562", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:9805b38f-a60e-5136-b0c6-57ef3dae7295", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2419d73c-764c-5b4a-a05b-03132592864d", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:5d6edf0b-d297-51c4-99d6-49ad691094d4", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:84a617be-86cb-56e0-9a74-932cc730a77e", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:153c53f0-eda9-5509-a527-e9b5bd0d8eab", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:777150dc-be65-5884-9015-9f8fc920cfc0", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e4ff523b-a4b4-525f-8d43-8ba8d2e2b6af", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:7582c94e-16ae-5e04-9d75-0b63eb76e251", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:813064d4-bc94-5595-b869-c545d55758ab", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:abc1dbe0-2cab-5c93-baff-5164fb55c0bd", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:fb9b3369-8786-5f38-9942-70b37e39c428", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:e00ea1f9-b537-57a9-82a3-44dd62a69020", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:3f8be20c-badc-527c-975c-b2aca1b423b5", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.19 of @angular/router. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:1583d301-126d-56bf-b355-336b83640c23", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:6e725314-8993-5602-8040-e21d01054dde", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:a72ad6fc-a50d-5101-b42f-4ad184661b38", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.19 of @angular/router. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:dd8e8fab-28d5-55ff-b2d2-ee4d51b93c47", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:3e9ff4d7-8edf-5a55-95eb-62d49de8ab3a", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.19 of @angular/router. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:d93bc6ec-deea-5601-8b1c-a6006aa9879f", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.19 of @angular/router." }, "affects": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/router@5.2.11-tuxcare.19" } ] }