{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8bf41e73-a976-5ad4-ab1a-1f5e413831fe", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14", "type": "library", "name": "@angular/service-worker", "version": "5.2.11-tuxcare.14", "purl": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ddfbd936-d8ff-50b1-9e5d-e1cff1d18a32", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:fe2d99d8-12e9-5184-87c3-43fad84d4e73", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c2b09cc0-3bc4-589e-acfa-df24eda4ec6f", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:da8368c6-bdc0-5634-9d8a-241737c54ef6", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:924e47ca-dea6-51f7-aad8-32649b0179c0", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:bcf9030f-8de6-5107-9206-28204b31c488", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:94a22d61-238a-59af-bd6e-838a57238829", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:fe31fddc-22b4-577c-8519-36a6fb6f06f4", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7b7d2891-261f-530f-a333-280286c5c6d5", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0faba5b3-0661-58c5-b88f-17fe0469fe06", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:551aa925-6502-5f6f-a6ed-cf9a573d3cb1", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1312fb16-64ab-54b1-ad25-c3f48b68df54", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2f98d738-f987-5449-895f-5dea40115234", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:19d69ff5-0fae-5a89-ae6d-02713257b24a", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:531689bd-bfb3-53a0-9f86-4b7482d0a21a", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:62e830dd-f65d-5f86-aa8e-6e7b9073880a", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:73560d87-a5a3-5200-aca9-88e11df5481c", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:66ebb9e1-365f-52b7-8fe1-c64f5ea0776f", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d337f595-28c8-5a23-906e-843c7d334bb5", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:62f35d8f-388f-5eed-978b-ca4eb5ad3e5a", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ba42ce36-ad4d-5782-9395-2e0a68f5cbe0", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ff8912db-eb55-5220-bd2a-500f8d0fd12b", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.14 of @angular/service-worker. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:adf1ebbf-97ab-51c5-8729-b79bf3fcf010", "id": "CVE-2026-69149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2a24d549-a297-5c56-9d2c-8b7bd17cbb10", "id": "CVE-2026-69151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:dc76ecb4-3318-5db2-890e-8ff59d29d173", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.14 of @angular/service-worker. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2c8e9885-c891-55f3-b8ee-9e88dc273a27", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:bec2b56a-4e1f-5843-a9cf-5e68fa7ebf69", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.14 of @angular/service-worker. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c21eceda-9345-5435-8c7c-c6c2b396c87c", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.14 of @angular/service-worker." }, "affects": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/service-worker@5.2.11-tuxcare.14" } ] }